Emissary Panda, which also goes by other identikits such as APT27, IronTiger, BronzeUnion, TG-3390, and LuckyMouse , is a decade old Chinese APT. It primarily targets aerospace, government, defense, technology, energy, and manufacturing sectors. Not much is know about the activities of this group.
InnfiRAT remote access Trojan is written in .net. It primarily steals his victim's information such as browser cookies, crypto currency wallet details, session data.
Megalodon malware recently spreading via phishing email campaigns. An Microsoft Excel files is sent which on successful execution download and run a RAT/ key-logger.
tRat is a modular delphi remote access trojan from the threat actor TA505. TA505 was previously responsible for Dridex and Locky campaigns.
Lazarus Group, a team of cyber criminals reportedly based in North Korea, is believed to be targeting its southern neighbor with malicious documents. The files, recently reviewed by South Korean researchers and experts at AlienVault, pack Manuscrypt malware as the final payload.