APT37

APT37 is a North Korean state-sponsored cyber espionage group linked to multiple aliases including InkySquid, ScarCruft, and Reaper. The group has primarily targeted South Korea but has also focused on Japan, Vietnam, and the Middle East, with activities spanning various industries such as manufacturing and healthcare. APT37 employs social engineering, web compromises, and zero-day exploits, including CVE-2018-0802, to conduct its operations. The group is associated with malware used for both espionage and destructive purposes.