North Korean Hacker Group Andariel Strikes with EarlyRat Malware
A previously unknown piece of malware named EarlyRat was used in phishing assaults by the North Korea-aligned threat actor Andariel, adding to the group's extensive toolkit.
In a recent analysis, Kaspersky stated that "Andariel infects machines by executing a Log4j exploit, which, in turn, downloads further malware from the command-and-control (C2) server."
Andariel, also known as Silent Chollima and Stonefly, is connected to North Korea's Lab 110, a main hacking organisation that also contains APT38 (also known as BlueNoroff) and other subordinate parts that are all monitored under the Lazarus Group banner.
The threat actor is known to engage in cybercrime as an additional source of revenue for the country under sanctions read more North Korean Hacker Group Andariel Strikes with...