EuRepoC
NavRAT · 01.01.2018
North Korean state-sponsored hackers compromised the network systems of south Korean targets with a remote access trojan called "NavRAT" in order to steal information.
NavRAT
- Date (as written)
- 01.01.2018
- Year
- 2018
- Country
- Korea, Republic of
- Actors (as written)
- APT37/Richochet Chollima/Red Eyes/InkySquid/ScarCruft/Reaper/Group123/TEMP.Reaper/Venus 121/G0067
- Actor pages
- APT37Richochet ChollimaRed EyesInkySquidScarCruftReaperGroup123TEMP.ReaperVenus 121G0067
- Tags (as written)
- Data theft;Hijacking with Misuse
Source entries (2)
Hackmageddon cyber attacks timelines (Paolo Passeri)
South Koreans · 31/05/2018
Researchers from Cisco Talos discover NavRAT, a remote access trojan that apparently went undiscovered for at least two years, targeting Koreans in a spam campaign using the possible upcoming U.S.-North Korea nukes summit as a phishing lure. The tool leverages the email platform from South Korea-based Naver Corporation to communicate with the attackers.