DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

APT37 (Reaper) operations incl. zero-days and wiper malware

Date (as written)
2018-02-20 (datePublished)
Year
2018
Country
Primarily South Korea – though also Japan, Vietnam and the Middle East
Actors (as written)
APT37 (Reaper; Scarcruft; Group123)
Actor pages
APT37
Tags (as written)
chemicals, electronics, manufacturing, aerospace, automotive, and healthcare

Source entries (3)

CFR Cyber Operations Tracker

APT 37 · Feb 2018
This threat actor uses social engineering techniques to target companies in the chemicals, electronics, manufacturing, aerospace, automotive, and health-care sectors, as well as the South Korean government.
https://www.cfr.org/cyber-operations/apt-37
https://www.fireeye.com/blog/threat-research/2018/02/apt37-overlooked-north-korean-actor.html
https://blog.talosintelligence.com/2018/01/korea-in-crosshairs.html
https://researchcenter.paloaltonetworks.com/2018/04/unit42-reaper-groups-updated-mobile-arsenal/

Hackmageddon cyber attacks timelines (Paolo Passeri)

Multiple Targets · 20/02/2018
Security Firm FireEye reveals the details of a lesser-known North Korean cyberespionage group targeting Korean Peninsula, Japan, Vietnam and the Middle East in 2017.
https://www.hackmageddon.com/2018/03/19/16-28-february-2018-cyber-attacks-timeline/
https://www.ibtimes.co.uk/reaper-little-known-north-korean-hacker-group-steps-attacks-vietnam-japan-middle-east-1662777

Mandiant / Google Cloud Threat Intelligence blog

APT37 (Reaper) operations incl. zero-days and wiper malware · 2018-02-20 (datePublished)
Our analysis of APT37’s recent activity reveals that the group’s operations are expanding in scope and sophistication, with a toolset that includes access to zero-day vulnerabilities and wiper malware. We assess with high confidence that this activity is carried out on behalf of the North Korean government ... Targeting: Primarily South Korea – though also Japan, Vietnam and the Middle East – in various industry verticals, including chemicals, electronics, manufacturing, aerospace, automotive, and healthcare.
https://cloud.google.com/blog/topics/threat-intelligence/apt37-overlooked-north-korean-actor

Suggest a correction on GitHub