Sekoia.io blog
Peeking at Reaper’s Surveillance Operations (Chinotto malware) · 2023-03-16T00:00:00.000Z
During our day to day hunting to protect our customers, we came across two Command and Control servers (C2s) of the North Korea-nexus intrusion set Reaper (aka APT37) with open directories, allowing us to observe hosted implants as well as victim’s exfiltrated data .