The RokRAT malware specifically aims at South Korean users, utilizing LNK files camouflaged within seemingly authentic documents.