27th March – Threat Intelligence Report · 2023-03-27
Researchers share the tools, techniques and procedures (TTPs) of the North Korean state-sponsored cyberespionage group APT37 (aka ScarCruft). The threat actor primarily targets individuals in South Korean organizations through spear phishing emails. In addition, APT37 distributes the Chinotto PowerShell-based backdoor using various attack vectors.
Individuals in various South Korean organizations · 21/03/2023
Researchers from Zscaler discover a new campaign by the North Korean APT27 threat actor, using weaponized Microsoft Compiled HTML Help (CHM) files to download additional malware onto targeted machines. [Date Occurred: During February and March 2023; Date Discovered: -]
APT37 | ThreatLabz · 2023-03-21
An operational security failure by the North Korean threat actor - APT37, led to the discovery of many previously unknown tools and techniques used by them