News North Korean malware uses new trick to avoid analysis and detectionRemote Access Trojan by DPRK-linked Konni hackers encrypts code with secret keys to frustrate cybersecurity researchers North Korean hackers have found a novel way to make recent malware significantly harder to analyze and detect, researchers at cybersecurity firm Malwarebytes told NK Pro on Friday, showcasing more advanced techniques to defeat antivirus software. According to Threat Intelligence Researcher Roberto Santos, new versions of a Remote Access Trojan (RAT) created by DPRK-linked cybercriminals have started using the service name of a process running on infected machines to encrypt and decrypt code and files related to the malware. Because the service name can change and is often unknown to researchers trying to analyze malicious code, it © Korea Risk Group. All rights reserved. |