Sep 22025 ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics ScarCruft’s Operation HanKook Phantom uses RokRAT malware in spear-phishing campaigns, targeting South Korean academics for espionage.