Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware
North Korea-linked ScarCruft uses fake Microsoft Account alerts and ZIP files to deliver NarwhalRAT, a Python RAT built for data theft.
More info