North Korean ScarCruft Hackers Exploit LNK Files to Spread RokRAT

Recent spear-phishing attacks, as evidenced by the AhnLab Security Emergency Response Center (ASEC) and Check Point, have used LNK files to trigger multi-stage infection sequences that eventually result in the deployment of the RokRAT malware.