RedEyes Group Wiretapping Individuals (APT37)

1. Overview

RedEyes (also known as APT37, ScarCruft, and Reaper) is a state-sponsored APT group that mainly carries out attacks against individuals such as North Korean defectors, human rights activists, and university professors. Their task is known to be monitoring the lives of specific individuals. In May 2023, AhnLab Security Emergency response Center (ASEC) discovered the RedEyes group distributing and using an Infostealer with wiretapping features that was previously unknown along with a backdoor developed using GoLang that exploits the …

activists ahnlab apt apt37 asec attacks center emergency human human rights malware analysis may may 2023 monitoring north north korean reaper redeyes response rights scarcruft security sponsored state task university