CERT24North Korea-linked Lazarus group uses a new remote access Trojan to hide in systemsLoading data…
CERT24Threat Observatory
Period

North Korea-linked Lazarus group uses a new remote access Trojan to hide in systems

The North Korea-linked Lazarus threat group is using a memory-only remote access Trojan (RAT) named RemotePE, designed to evade detection and leave few forensic traces. Fox-IT described a three-stage toolchain observed during an incident involving an unnamed decentralized finance organization.

← Back to intelligence

North Korea-linked Lazarus group uses a new remote access Trojan to hide in systems

The North Korea-linked Lazarus threat group is using a memory-only remote access Trojan (RAT) named RemotePE, designed to evade detection and leave few forensic traces. Fox-IT described a three-stage toolchain observed during an incident involving an unnamed decentralized finance organization.