YamaBot

Reported Context (1)

employed a previously unknown implant we called “MagicRAT,” along with known malware families VSingle, YamaBot and TigerRAT, all of which were previously attributed to the threat actor by Japanese and Korean Lazarus Group Uses CollectionRAT and DeimosC2 in Enterprise Campaign

CVE (1)

Malware (8)

People (3)

Threat Actors (2)

Vendors (1)

Products (13)

Tools (7)

Industries (2)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.