KimJongRAT Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
December 1, 2025
Last Seen
December 2, 2025

Related Threat Clusters

  • KimJongRAT Targets Windows Users with Malicious HTA Files

    KimJongRAT has been identified as a threat actor targeting Windows users through weaponized .hta files designed to steal login credentials. The attack leverages vulnerabilities in the Windows operating system, impacting…

    2 articles · Updated December 1, 2025
  • BreachLock Recognized as PTaaS Leader in 2025 GigaOm Radar Report

    BreachLock has been named a leader in the 2025 GigaOm Radar Report for Penetration Testing as a Service (PTaaS) for the third consecutive year. This recognition highlights the company's continued excellence in…

    5 articles · Updated December 1, 2025
  • KimJongRAT Malware Targets Windows Users via Phishing Campaign

    The KimJongRAT malware, linked to the North Korean Kimsuky group, is targeting Windows systems through phishing emails. These emails contain a ZIP archive disguised as a tax notice, which, when opened, executes a…

    2 articles · Updated December 2, 2025

Recent Intelligence Reports

  • Illicit HTA files facilitate KimJongRAT distribution — Scworld · December 2, 2025
  • KimJongRAT Attacking Windows Users via Weaponized .hta Files to Steal Logins — Cybersecuritynews · December 1, 2025
  • BreachLock Named a Leader in 2025 GigaOm Radar Report for Penetration Testing as a ... — Cybersecuritynews · December 1, 2025
  • KimJongRAT Strikes Windows Users via Malicious HTA Files — Gbhackers · December 1, 2025

CVSS v3.1 Breakdown