South Korea Hit by NiceRAT Malware: Cracked Software Users Beware!
Threat actors are deploying NiceRAT malware to co-opt devices into a botnet targeting South Korean users. Disguised as cracked software, NiceRAT uses Discord Webhook for command-and-control, making it tough to detect.
Hot Take:
Who knew cracking software would lead to cracking your own cybersecurity? South Koreans, beware of NiceRAT: the malware with a misleadingly nice name but a penchant for hijacking your devices into a botnet. And if you fall for it, it’s not just cracked software you’ll be crying over!
Key Points:
- NiceRAT malware targets South Korean users via cracked software.
- The malware spreads through information sharing and bypasses anti-malware tools.
- NiceRAT uses a Discord Webhook for command-and-control.
- First released in April 2024, it’s actively developed and available as MaaS.
- Parallel threat: Bondnet cryptocurrency mining botnet resurfaces using high-performance miner bots.
Already a member? Log in here