Operation Capsule Vault: RokRAT Attack Chain Analysis Using EMBED_PAYLOAD_v2

Reported 12 Jul 2026 by otx · Severity: medium

A sophisticated spear-phishing campaign targeted individuals in research, policy, and academic fields through emails disguised as materials from an actual academic conference. The attack leveraged a cloud storage link delivering a malicious ISO file containing a PIF executable di