North Korean Hackers Roll Out Their New MoonPeak RAT

Amber | Attack Report
Download PDF

UAT-5394, a state-sponsored North Korean cyber threat actor, is potentially a distinct group or a sub-division of the infamous Kimsuky APT group. Renowned for its tactical alignment with Kimsuky, UAT-5394 is actively engaged in the development and deployment of a new XenoRAT malware variant, known as MoonPeak.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox