KimJongRAT Attacking Windows Users via Weaponized .hta Files to Steal Logins

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

KimJongRAT Targets Windows Users with Malicious HTA Files KimJongRAT has been identified as a threat actor targeting Windows users through weaponized .hta files designed to steal login credentials. The attack leverages vulnerabilities in the Windows operating system, impacting users who open these malicious files. Cybersecurity experts are advising users to remain vigilant against such threats. 2 sources 49