North Korean Hackers Weaponize Fake Research to Deliver RokRAT Backdoor

Media organizations and high-profile experts in North Korean affairs have been at the receiving end of a new campaign orchestrated by a threat actor known as ScarCruft in December 2023.
"ScarCruft has been experimenting with new infection chains, including the use of a technical threat research report as a decoy, likely targeting consumers of threat intelligence like cybersecurity

actor backdoor campaign december december 2023 decoy end experts fake hackers high infection media north north korean north korean hackers organizations profile report research rokrat scarcruft technical threat threat actor threat research