Explore the impact of South Korean cyberattack threats on civil society organizations and their defenders in a detailed study.

Learn how APT-C-28 operates in cyber espionage, targeting industries with advanced techniques and the RokRat Trojan.

Uncover the Squid Werewolf cyber-espionage campaign and its tactics to exploit fake job offers for cyberattacks.

Uncover insights on KoSpy Android Spyware, a new threat targeting Korean and English-speaking users with deceptive utility apps.

Explore the dangers of Konni RAT, a sophisticated Remote Access Trojan targeting Windows systems with multi-stage attacks.

New report details APT37's "ToyBox Story" campaign, using spear phishing and cloud services to deploy RoKRAT malware. Fileless attacks and stealthy tactics revealed.

APT37's new RoKRAT malware variant uses steganography to hide encrypted payloads in JPEG images, bypassing antivirus and traditional defenses by executing entirely in memory.

S2W’s Threat Analysis and Intelligence Center (TALON) has uncovered a sophisticated malware campaign attributed to the North Korean APT group ScarCruft (a.k.a. APT37, Reaper, Ricochet Chollima). T…

Reproducing the tactics of APT37, this blog shows how CHM files can be weaponized for threat emulation. From lure design to reverse shell.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread