North Korean state-sponsored hacking group APT37 stole data from and wiretapped unspecified South Korean individuals using information stealer FadeStealer in May 2023 · 01.05.2023
The North Korean state-sponsored hacking group APT37 stole data from and wiretapped unspecified South Korean individuals using information stealer FadeStealer in May 2023, South Korean IT security company AhnLab reported on 21 June 2023.
The exfiltrated data included screenshots, keylogs, intercepted microphone recordings, and data collected of smartphone devices and removable media.
RedEyes Group Wiretapping Individuals (APT37) · 2023-05
RedEyes Group Wiretapping Individuals (APT37)
https://asec.ahnlab.com/en/54349/
Targeting of South Korean professors, dissidents, and human rights advocates · Jun 2023
APT 37, a North Korean hacking group, distributed information-stealing malware through Ably, a South Korean data-transfer and messaging application. The malware could be used to steal information from the victim’s computer and to record video and audio and exfiltrate it.
Multiple organizations · 21/06/2023
Researchers from AhnLab reveal the details of the latest campaign from the North Korean threat actor APT37 using two new custom malware strains dubbed 'AblyGo backdoor' and 'FadeStealer'. [Date Occurred: During May 2023; Date Discovered: During May 2023]
RedEyes Group Wiretapping Individuals (APT37) · 2023-06-12
excerpt: 1. Overview RedEyes (also known as APT37, ScarCruft, and Reaper) is a state-sponsored APT group that mainly carries out attacks against individuals such as North Korean defectors, human rights activists, and university professors. Their task is known to be monitoring the lives of specific individuals. In May 2023, AhnLab Security Emergency response Center (ASEC) discovered […] | attribution sentence: Overview RedEyes (also known as APT37, ScarCruft, and Reaper) is a state-sponsored APT group that mainly carries out attacks against individuals such as North Korean defectors, human rights activists, and university professors. | target sentence: Similar to the case covered back in March, “Malware Distributed Disguised as a Password File” [2] , it is assumed that targets were approached via spear phishing emails with a normal password-protected document and a CHM malware disguised as a password file attached to them.
개인을 도청하는 RedEyes 그룹 (APT37) · 2023-06-12
excerpt: 1.개요 RedEyes(also known as APT37, ScarCruft, Reaper) 그룹은 국가 지원을 받는 APT 조직이며 주로 북한 이탈 주민, 인권 운동가, 대학 교수 등의 개인을 대상으로 공격을 수행한다. 이들의 임무는 특정인들의 일상을 감시하는 것으로 알려져 있다. ASEC(AhnLab Security Emergengy response Center)은 2023년 5월 RedEyes 그룹이 Ably 플랫폼을 악용한 Golang 백도어를 유포 및 마이크 도청 기능을 포함한 이전에 […] | attribution sentence: 1.개요 RedEyes(also known as APT37, ScarCruft, Reaper) 그룹은 국가 지원을 받는 APT 조직이며 주로 북한 이탈 주민, 인권 운동가, 대학 교수 등의 개인을 대상으로 공격을 수행한다. | target sentence: 1.개요 RedEyes(also known as APT37, ScarCruft, Reaper) 그룹은 국가 지원을 받는 APT 조직이며 주로 북한 이탈 주민, 인권 운동가, 대학 교수 등의 개인을 대상으로 공격을 수행한다.