#SPICYTUNA

Malware/Tool

2023-04-20 • APT43: An investigation into the North Korean group’s cybercrime operations

SPICYTUNA is a VBA downloader used by APT43. Its presence in malicious Office documents can be detected through rules that identify embedded VBA projects, although such rules provide only a soft signal rather than family-specific confirmation.

Tagged Reports

« Back