#NarwhalRAT

ScarCruft Deploys NarwhalRAT via Fake Microsoft Security Alerts

North Korean threat actor ScarCruft (APT37) is deploying NarwhalRAT via spear-phishing emails that mimic official Microsoft Account security notifications.