APT37, also known as Reaper, ScarCruft, or Ricochet Chollima, is a North Korean state-sponsored cyber espionage group that emerged around 2012. It has progressively expanded its operational scope and sophistication, notably since 2017. The group is assessed with high confidence to operate under the Reconnaissance General Bureau (RGB), North Korea's primary intelligence agency. Its core motivation is cyber espionage, primarily focused on intelligence gathering to support the DPRK's strategic military, political, and economic interests, though recent activities indicate a shift towards financially motivated operations, including the deployment of ransomware. APT37 is distinguished by its consistent ability to rapidly incorporate zero-day vulnerabilities in common software like Hangul Word Processor, Adobe Flash, and Internet Explorer into its campaigns, coupled with its use of customized malware families and strategic web compromises. While primarily targeting South Korea, its operations

Aliases del actor

APT 37APT-C-28ATK4G0067Group 123Group123InkySquidMoldy PiscesOperation DaybreakOperation ErebusReaperReaper GroupRed EyesRicochet ChollimaScarCruftVenus 121

Actores similares

apt-equationgroupactor · 1apt-group5actor · 1apt-reaperactor · 1APT37 (Reaper)actor · 1Gamaredon Groupapt · 1Operation Red Signatureapt · 0apt-redbaldknightactor · 1apt-redfoxtrotactor · 1apt-redjuliettactor · 1apt-redoctoberactor · 1