EuRepoC
Subgroup of North Korean state-sponsored hacking group 'Lazarus', 'Andariel', infected unidentified victim with new malware family EarlyRAT · Not available
The subgroup of the North Korean state-sponsored hacking group 'Lazarus', 'Andariel', infected an unidentified victim with previously undocumented malware of the EarlyRAT family, the Russian IT security firm Kaspersky reported on 28 June 2023. Kaspersky discovered the tool when investigating cases, in which organizations had been targeted through a Log4j exploit. The EarlyRAT instance detected in the process, however, appeared to have been deployed through a phishing campaign.