UAT-5394 customized XenoRAT (mentioned in "XenoRAT Adopts Excel XLL Files and ConfuserEx")

Date (as written): 2024-11-19T00:00:00.000Z
Year: 2024
Actors (as written): UAT-5394 (North Korean-linked actor)
Actor pages: UAT-5394

Source entries (1)

Hunt.io blog

UAT-5394 customized XenoRAT (mentioned in "XenoRAT Adopts Excel XLL Files and ConfuserEx") · 2024-11-19T00:00:00.000Z

More recently, Cisco Talos highlighted a shift in XenoRAT's usage, with a North Korean-linked actor, tracked as UAT-5394 , deploying a customized variant.

https://hunt.io/blog/xenorat-excel-xll-confuserex-as-access-method

Suggest a correction on GitHub