#DPAPI

Lazarus' RemotePE Lives Entirely in Memory, Targets Crypto Treasuries

A fresh in-memory RAT from DPRK's Lazarus Group is being chained behind two custom loaders to drain finance and crypto orgs. Here is what to check tonight.