Chain Reaction: ROKRAT’s Missing Link

Date (as written): 2023-05-01
Year: 2023

Source entries (2)

Check Point Research

Chain Reaction: ROKRAT’s Missing Link · 2023-05-01

In this article, we describe a cluster of observed activity that deploys ROKRAT, a tool previously attributed to a North Korean threat actor commonly referred to as APT37, Inky Squid, RedEyes, Reaper or ScarCruft.

https://research.checkpoint.com/2023/chain-reaction-rokrats-missing-link/

Hackmageddon cyber attacks timelines (Paolo Passeri)

Korean-speaking individuals · 01/05/2023

Researchers from Check Point reveal the details of a new campaign by the Korea-linked ScarCruft APT group (aka APT37, Reaper, and Group123) delivering the ROKRAT and Amadey payloads. [Date Occurred: During 2022; Date Discovered: During 2022]

https://www.hackmageddon.com/2023/06/22/1-15-may-2023-cyber-attacks-timeline/

https://securityaffairs.com/145622/apt/scarcruft-apt-new-infection-chains.html

Suggest a correction on GitHub