Malware known as NarwhalRAT, suspected to be the work of North Korea-linked hacking group APT37, is spreading, according to security company Genians on June 15.

The hacking campaign involves emails claiming that one-time password (OTP) authentication codes are being repeatedly generated for Microsoft accounts, urging recipients to review an attached security notice that, when opened, installs the malware.