North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware

ScarCruft, a North Korean threat actor, used a zero-day exploit in a Windows security flaw (CVE-2024-38178) to spread RokRAT malware through specially crafted URLs in Internet Explorer Mode.