APT37
BedrohungsakteurKPauch bekannt als
Weitere Namen und Kennungen dieser Entität.
ATT&CK
APT37 · Group123 · InkySquid · Reaper · Ricochet Chollima · ScarCruft · TEMP.Reaper
MISP
APT-C-28 · APT37 · ATK4 · Group 123 · InkySquid · Moldy Pisces · Operation Daybreak · Operation Erebus · PLAIN NEPTUNE · Reaper · Reaper Group · Red Eyes · Ricochet Chollima · ScarCruft · Venus 121
APT37 has likely been active since at least 2012 and focuses on targeting the public and private sectors primarily in South Korea. In 2017, APT37 expanded its targeting beyond the Korean peninsula to include Japan, Vietnam and the Middle East, and to a wider range of industry verticals, including chemicals, electronics, manufacturing, aerospace, automotive and healthcare entities
zugeordnete ATT&CK-Gruppen
Zugehörige Bedrohungsgruppen.
genutzte Techniken (29)
ATT&CK-Techniken, die dies ermöglicht oder abbildet.
genutzte Software (13)
Zugehörige Malware und Tools.
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://www.volexity.com/blog/2021/08/17/north-korean-apt-inkysquid-infects-victims-using-browser-exploits/
- https://www.fireeye.com/blog/threat-research/2018/02/apt37-overlooked-north-korean-actor.html
- https://www2.fireeye.com/rs/848-DID-242/images/rpt_APT37.pdf
- http://blog.talosintelligence.com/2018/01/korea-in-crosshairs.html
- https://twitter.com/mstoned7/status/966126706107953152
- https://www.cfr.org/interactive/cyber-operations/apt-37
- https://www.bleepingcomputer.com/news/security/report-ties-north-korean-attacks-to-new-malware-linked-by-word-macros/
- https://unit42.paloaltonetworks.com/unit42-freemilk-highly-targeted-spear-phishing-campaign/