Recorded Future Insikt Group
APT37 Facebook-based pretexting campaign with tampered PDFelement installer (in H1 2026 Malware Vulnerability Trends) · (no date on page)
Delivered through a North Korean APT37 Facebook-based pretexting campaign that lured targets into installing a tampered PDFelement installer