Tag: endclient rat

1 Attack Reports | 0 Vulnerabilities

Attack reports

New Kimsuky Malware "EndClient RAT": Technical Report and IOCs

A novel Remote Access Trojan (RAT) called 'EndClient RAT' has been discovered targeting North Korean Human Rights Defenders. The malware, attributed to the Kimsuky group, is delivered via a signed Microsoft Installer package disguised as 'StressClear.msi'. It uses AutoIT scripts for execution and e…
north korea
persistence
autoit
remote access trojan
c2 protocol
2025-11-07
code signing
human rights defenders
endclient rat
Published: November 7, 2025
Downloadable IOCs: 3
Click here to see more Attack Reports