Security News Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePE TheHackerNews Daniel Bender 02 Sep 2025 Lazarus Group used PondRAT, ThemeForestRAT, and RemotePE in a 2024 DeFi attack, likely via Chrome zero-day.