ThaiCERT Threat Group Cards
Operation “Evil New Year 2018” · 2018-01
Operation “Evil New Year 2018” Target: South Korean users. Method: Spear-phishing emails combined with malicious HWP documents created using Hancom Hangul Office Suite.
Operation “Evil New Year 2018”
- Date (as written)
- 2018-01
- Year
- 2018
- Actors (as written)
- Reaper, APT 37, Ricochet Chollima, ScarCruft
- Actor pages
- ReaperAPT 37Ricochet ChollimaScarCruft
Source entries (1)
Values found later for empty fields
country: South Korean users
The 'Golden Time', both 'Evil New Year' and the 'North Korean Human Rights' campaigns specifically targeted South Korean users.
source link: https://blogs.cisco.com/security/talos/korea-in-the-crosshairs
"Evil New Year 2018" campaign