"Ricochet Chollima APT Adversary Simulation" published by S3N4T0R. #LNK, #RicochetChollima, #DPRK, #CTI medium.com/@S3N4T0R/ricochet-cholli...

#APT #APT37 #RicochetChollima #ScarCruft #RokRat #threat #malware

📍🇰🇵
💥🇰🇷🌏

⛓️#Phishing > RAR|ZIP > #LNK extract .bat/PS/DOCs > #PS > #BAT execution > #PS decrypt #RokRat SC > Load + RUN #RAT> #C2

🔗360 Advanced Threat Research: mp.weixin.qq.com/s?__biz=MzUy...