The Unintentional Leak: A glimpse into the attack vectors of APT37

Summary

At Zscaler ThreatLabz, we have been closely monitoring the tools, techniques and procedures (TTPs) of APT37 (also known as ScarCruft or Temp.Reaper) - a North Korea-based advanced persistent threat actor. This threat actor has been very active in February and March 2023 targeting individuals in various South Korean organizations.

During our threat hunting research, we came across a GitHub repository which is owned by a member of the threat actor group. Due to an operational security (OpSec) failure of …

actor advanced advanced persistent threat apt37 attack attack vectors february github hunting korea leak march monitoring north north korea organizations persistent persistent threat procedures repository research scarcruft south targeting techniques techniques and procedures threat threat actor threat hunting tools ttps unintentional zscaler