North Korea's ScarCruft Deploys RokRAT Malware via LNK File Infection Chains
North Korea's ScarCruft Deploys RokRAT Malware via LNK File Infection Chains
02 May 2023
The North Korean threat actor known as ScarCruft began experimenting with oversized LNK files as a delivery route for RokRAT malware as early as July 2022, the same month Microsoft began blocking macros across Office documents by default.