October 2024 Threat Trend Report on APT Attacks (South Korea)
ID: 3f3b7e3a-3888-5b92-b4cc-5d34142bece9
STIX ID: report--3f3b7e3a-3888-5b92-b4cc-5d34142bece9
Feed Name: ASEC
Threat Score
AhnLab’s October 2024 APT report for Korea details a surge in spear-phishing attacks delivering malicious LNK and HWP attachments that unpack CAB archives, run obfuscated PowerShell and script payloads, and ultimately deploy RATs (notably XenoRAT and RoKRAT) capable of keylogging, screenshots, and data exfiltration; the report includes sample filenames, decoy documents, MD5 hashes, and C2/download URLs observed in the campaigns.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.