APT37
InkySquidScarCruftReaperGroup123TEMP.ReaperRicochet Chollima
UnattributedNo public state or group attribution on record
APT37 is a North Korean state-sponsored cyber espionage group that has been active since at least 2012. The group has targeted victims primarily in South Korea, but also in Japan, Vietnam, Russia, Nepal, China, India, Romania, Kuwait, and other parts of the Middle East. APT37 has also been linked to the following campaigns between 2016-2018: Operation Daybreak, Operation Erebus, Golden Time, Evil New Year, Are you Happy?, FreeMilk, North Korean Human Rights, and Evil New Year 2018.
MITRE ATT&CK Techniques
Associated Malware
BLUELIGHTCORALDECKCobalt StrikeDOGCALLFinal1stspyHAPPYWORKKARAENavRATPOORAIMROKRATSHUTTERSPEEDSLOWDRIFTWINERACK
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.