LNK FILE DISGUISED AS CERTIFICATE DISTRIBUTING ROKRAT MALWARE

Summary from the TLDR InfoSec newsletter

AhnLab Security Intelligence Center has identified a North Korean campaign targeting South Koreans with a malicious LNK file. The file distributes a loader for the RokRAT C2 malware. This article provides a deep dive into the loader and IoCs for the campaign.