Security News Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePE TheHackerNews Daniel Bender Sep 2, 2025 Lazarus Group used PondRAT, ThemeForestRAT, and RemotePE in a 2024 DeFi attack, likely via Chrome zero-day.