ThaiCERT Threat Group Cards
Operation “Evil New Year” · 2016-11
Operation “Evil New Year” Target: South Korean users. Method: spear-phishing emails combined with malicious HWP documents created using Hancom Hangul Office Suite.
Operation “Evil New Year”
- Date (as written)
- 2016-11
- Year
- 2016
- Actors (as written)
- Reaper, APT 37, Ricochet Chollima, ScarCruft
- Actor pages
- ReaperAPT 37Ricochet ChollimaScarCruft
Source entries (1)
Values found later for empty fields
country: South Korean users
The 'Golden Time', both 'Evil New Year' and the 'North Korean Human Rights' campaigns specifically targeted South Korean users.
source link: https://blogs.cisco.com/security/talos/korea-in-the-crosshairs
"Evil New Year" campaign