Security News ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics TheHackerNews Daniel Bender Sep 1, 2025 ScarCruft’s Operation HanKook Phantom uses RokRAT malware in spear-phishing campaigns, targeting South Korean academics for espionage.