Search: “APT37”

28 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 46 Threat actor 15 Exploit / PoC 10 Ransomware 8 Data breach 7 Vulnerability 3 Research 1 Phishing & fraud 1

SeverityAll critical 28 high 48 medium 13 low 1 info 1

North Korean APT Group tracked as APT37 broadens its horizons

Security AffairsFeb 21, 14:04 UTC · Feb 21, 2018Threat actor

60

North Korea-linked APT37 exploited IE zero

Security AffairsOct 19, 14:07 UTC · Oct 19, 2024Threat actor in the wildCVE-2024-38178 CVE-2022-41128

60

APT37 combines cloud storage and USB implants to infiltrate air

Security AffairsMar 2, 12:38 UTC · Mar 2, 2026Threat actor

60

North Korea’s APT37 deploys RokRAT in new phishing campaign against academics

Security AffairsSep 1, 10:49 UTC · Sep 1, 2025Malware

55

APT37 used Internet Explorer Zero

Security AffairsDec 8, 15:08 UTC · Dec 8, 2022Threat actor in the wildCVE-2022-41128 CVE-2017-0199

60

North Korea-linked APT group ScarCruft spotted using new Android spyware KoSpy

Security AffairsMar 13, 16:17 UTC · Mar 13, 2025Malware

55

Google: North Korean gov’t hackers used Internet Explorer zero

The RecordJan 9, 00:00 UTC · Jan 9, 2023Exploit / PoC CVE-2022-41128

60

North Korean hackers exploit Itaewon tragedy to infiltrate South Korean targets

CyberScoopDec 7, 21:00 UTC · Dec 7, 2022Exploit / PoC in the wildCVE-2022-41128

60

North Korea-linked ScarCruft APT adds Bluetooth Harvester to its arsenal

Security AffairsMay 14, 12:48 UTC · May 14, 2019Exploit / PoC CVE-2018-8120

60

Poisoned Windows shortcuts found to be a favorite of Chinese, Russian, N. Korean state hackers

The RecordMar 18, 20:27 UTC · Mar 18, 2025Exploit / PoC in the wild

60

North Korea-linked ScarCruft APT uses large LNK files in infection chains

Security AffairsMay 5, 22:20 UTC · May 5, 2023Ransomware

60

North Korea ScarCruft APT used previously undetected Dolphin Backdoor against South Korea

Security AffairsDec 1, 11:02 UTC · Dec 1, 2022Malware

55

NK-linked InkySquid APT leverages IE exploits in recent attacks

Security AffairsAug 19, 06:51 UTC · Aug 19, 2021Exploit / PoC in the wildCVE-2020-1380 CVE-2021-26411

60

North Korean hackers reboot espionage operations following December takedown

CyberScoopMar 31, 17:54 UTC · Mar 31, 2020Threat actor in the wild

60

Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scams

Help Net SecurityMay 10, 00:00 UTC · May 10, 2026Vulnerability in the wildCVE-2026-41940 CVE-2026-4670 CVE-2026-5174+4 CVEs

60

Security Affairs newsletter Round 541 by Pierluigi Paganini

Security AffairsSep 14, 12:09 UTC · Sep 14, 2025Ransomware in the wildCVE-2025-53136

60

⚡ Weekly Recap: BadCam Attack, WinRAR 0-Day, EDR Killer, NVIDIA Flaws, Ransomware Attacks & More

The Hacker NewsAug 12, 04:40 UTC · Aug 12, 2025Ransomware in the wildCVE-2025-54948 CVE-2025-54987 CVE-2025-8088+30 CVEs

60

Nation-state groups hit hundreds of organizations with Microsoft Windows zero

CyberScoopMar 20, 14:07 UTC · Mar 20, 2025Threat actor in the wild

60

THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 04

The Hacker NewsNov 18, 03:51 UTC · Nov 18, 2024Data breach CVE-2020-12271 CVE-2020-15069 CVE-2020-29574+19 CVEs1

60

North Korean ScarCruft Exploits Windows Zero

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2024Exploit / PoC CVE-2024-38178 CVE-2020-1380 CVE-2022-41128

60

THN Cybersecurity Recap: Top Threats and Trends (Sep 30

The Hacker NewsOct 7, 12:34 UTC · Oct 7, 2024Ransomware in the wild

60

The future of automotive cybersecurity: Treating vehicles as endpoints

Help Net SecuritySep 5, 00:00 UTC · Sep 5, 2024Ransomware

60

Russia and Belarus targeted by at least 14 nation

The RecordFeb 27, 13:37 UTC · Feb 27, 2024Data breach

60

Google Warns of Internet Explorer Zero-Day Vulnerability Exploited by ScarCruft Hackers

The Hacker NewsDec 9, 17:03 UTC · Dec 9, 2022Exploit / PoC in the wildCVE-2020-1380 CVE-2021-26411 CVE-2022-41128

60

NK Hackers Deploy Browser Exploits on South Korean Sites to Spread Malware

The Hacker NewsAug 18, 14:51 UTC · Aug 18, 2021Malware in the wildCVE-2020-1380 CVE-2021-26411

60

Microsoft seizes 50 websites used by North Korean hackers to gather intelligence

CyberScoopDec 31, 14:30 UTC · Dec 31, 2019Exploit / PoC in the wild

60

Google '0Day In the Wild' project tracks zero

Security AffairsMay 16, 19:00 UTC · May 16, 2019Exploit / PoC

60

Cybersecurity week Round-Up (2018, Week 8) -Let's summarize the most important event occurred last week in 3 minutes.

Security AffairsFeb 26, 20:57 UTC · Feb 26, 2018Ransomware

60