Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware

The North Korean statesponsored hacking group known as ScarCruft aka APT37 has been observed using spearphishing messages impersonating Microsoft Account security notifications to deliver a new malware called NarwhalRAT The attack email contained a message impersonating an MS account security alert the Genians Security Center GSC said It was designed to create concern over possible