APT37

Coverage timeline

• 
  North Korean APT37 uses Dropbox phishing to deliver RokRAT malware

  securityonline.info · Jul 17, 2026
• 
  APT37 Uses Fake Microsoft Emails to Drop NarwhalRAT on Korean PCs

  securityonline.info · Jun 19, 2026
• 
  Backdoored PyTorch Lightning Package Drops Credential Stealer

  securityaffairs.com · May 10, 2026
• 
  North Korean Hackers Trojanise Korean Gaming Site to Spy on Users

  www.infosecurity-magazine.com · May 5, 2026
• 
  ScarCruft deploys Android BirdCall backdoor via sqgame.net

  thehackernews.com · May 5, 2026
• 
  North Korea APT37 uses fake Facebook to spread RokRAT via PDF

  thehackernews.com · Apr 13, 2026