KimJongRAT Continues to Evolve by Leveraging LOTS

Reported 25 Jun 2026 by otx · Severity: medium

In May 2026, security researchers observed an attack campaign distributing KimJongRAT through GitHub and other legitimate services. KimJongRAT, used by the North Korean APT group Kimsuky since 2013, combines information stealing and remote access capabilities. The infection chain