NarwhalRAT – Python-Based Remote Access Trojan by ScarCruft
NarwhalRAT is a Python-based remote access trojan (RAT) used by the North Korean group ScarCruft. It is capable of keylogging, screen capture,…
Tag: pCloud
pCloud – Cloud Storage Service Provider
pCloud is a cloud storage service that offers API access. The NarwhalRAT malware uses pCloud's API as a secondary C2 channel via…
Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware
The North Korean state-sponsored hacking group ScarCruft (APT37) has been observed using spear-phishing emails impersonating Microsoft Account security notifications to deliver a…