VNVũ Nhật Lâminblog.fiscybersec.com·Jun 9 · 15 min readRemotePE — The Lazarus RAT that lives in memorySummary A subgroup of Lazarus — the North Korea-linked APT known for cryptocurrency heists worth hundreds of millions of dollars — has retired its older tooling (ThemeForestRAT, PondRAT) in favour of 00