The implant, identified by Rapid7 Labs with medium confidence as originating from North Korean state-sponsored actors, ...
NodeStealer now steals data and adds keylogging, clipboard monitoring, and screen capture, expanding into full surveillance.