North Korean Hacking Group Andariel Uses Previously Unknown EarlyRAT Malware

Security analysts have uncovered 'EarlyRAT,' an undocumented remote access trojan (RAT) utilized by Andariel, a sub-group of the Lazarus North Korean state-sponsored hacking group. Andariel, also known as Stonefly, is known for employing the DTrack modular backdoor to gather various forms of information from compromised systems. Recent findings suggest that a North Korean group, potentially Andariel, has successfully obtained valuable intellectual property over a two-month period using an updated variant of DTrack. Read more...