South Korea Hit by NiceRAT Malware: Cracked Software Users Beware!

Threat actors are deploying NiceRAT malware to co-opt devices into a botnet targeting South Korean users. Disguised as cracked software, NiceRAT uses Discord Webhook for command-and-control, making it tough to detect.

Hot Take:

Who knew cracking software would lead to cracking your own cybersecurity? South Koreans, beware of NiceRAT: the malware with a misleadingly nice name but a penchant for hijacking your devices into a botnet. And if you fall for it, it’s not just cracked software you’ll be crying over!

Key Points:

  • NiceRAT malware targets South Korean users via cracked software.
  • The malware spreads through information sharing and bypasses anti-malware tools.
  • NiceRAT uses a Discord Webhook for command-and-control.
  • First released in April 2024, it’s actively developed and available as MaaS.
  • Parallel threat: Bondnet cryptocurrency mining botnet resurfaces using high-performance miner bots.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here