Lazarus Deploys RemotePE Memory-Only RAT Against Financia...

追加: 2026-05-28

[00:00:00]Justine, Lazarus deploys remote PE memory only RAT against financial and crypto firms just surfaced. Here are the key artifacts. According to The Hacker News, Lazarus deploys remote PE memory only RAT against financial and crypto firms. Here's what happened.

[00:00:16]Cybersecurity researchers have shed light on a cross-platform malware called Remote PE that has been put to use by the North Korean Lazarus Group in attacks targeting financial and cryptocurrency organizations.

[00:00:27]Remote PE, per NCC Group subsidiary Fox-IT, is part of a multi-stage attack chain that involves two loaders, Tactic's DLoader and Remote PE Loader.

[00:00:36]DLoader decrypts and preserve your evidence logs. This is forensics gold.

[00:00:41]Document this in your playbook and don't get caught off guard. Subscribe to the X wipe feed for forensics updates.