North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware
The North Korean hacking group tracked as APT37 (aka ScarCruft) has been attributed to a fresh multi-stage, social engineering campaign in which threat actors approached targets on Facebook and added them as friends on the social media platform, turning the trust-building exercise into a delivery channel for a remote access trojan called RokRAT. "The threat actor used two Facebook
North Korean APT37 group used social engineering tactics on Facebook to gain trust and deliver RokRAT malware, a remote access trojan that allows for unauthorized access to targeted systems. This campaign highlights the evolving threat landscape of nation-state actors using social media platforms as vectors for malicious activity.
Read the full article
This is a curated summary. The complete article is available at The Hacker News.