New NarwhalRAT Malware Targets Korean Users via Phishing Emails

NarwhalRAT, linked to North Korean APT37, is being delivered to Korean users through Microsoft-themed spear-phishing emails that prompt victims to open a malicious LNK file; the RAT offers more than 30 capabilities (including keylogging, screen capture, and remote execution), uses a 'naverwhale' folder for evasion, stages collected data locally before exfiltration, and security experts recommend strengthening detection to mitigate future variants.