Suspected North Korean hackers spread a convincing but malware-laced Android application that provides sweeping control over victims’ devices, in a targeted attack against a journalist covering the DPRK, Seoul-based non-profit Interlab told NK Pro.

The spyware, which the researchers dub RambleOn in a new report, is disguised as a secure messaging application, but in reality fetches malicious payloads from Russian and Swiss cloud service providers. 

NK Pro obtained a sample of the malware after an individual messaged Korea Risk Group CEO Chad O’Carroll and claimed to have exclusive information about North Korea’s widely