Skip to content

CyberSIXT Search

Threat actor · coverage timeline

APT37

9 articles from 6 outlets between 27 Feb and 16 Sep. First reported by The Hacker News. The busiest day was Tue 5 May, with 2 articles.

Articles: 9; all time · from 6 outlets
Days with coverage: 8; across 202 days
Busiest day: 2; articles on Tue 5 May
Last 7 days: 0a day; vs 0 a day before
First report: 27 Feb; The Hacker News
CVEs named: 0; in these articles

Coverage over time

9 articles · 27 Feb – 16 Sep

27 FebFirst report27 Feb · The Hacker News

Show as table

APT37: articles per day
Day (UTC)	Articles	Outlets
Fri 27 Feb	1	The Hacker News 1
Mon 2 Mar	1	SecurityWeek 1
Mon 13 Apr	1	The Hacker News 1
Tue 5 May	2	The Hacker News 1, Infosecurity 1
Sun 10 May	1	Security Affairs 1
Fri 19 Jun	1	SecurityOnline 1
Fri 17 Jul	1	SecurityOnline 1
Wed 16 Sep	1	Dark Reading 1

Articles

9 articles

Wed 16 Sep1 article

01:24
North Korean Hackers Hide Linux Implant Inside HAProxy Load BalancersDark Reading

Fri 17 Jul1 article

14:11
North Korean APT37 uses Dropbox phishing to deliver RokRAT malwareSecurityOnline

Fri 19 Jun1 article

08:50
APT37 Uses Fake Microsoft Emails to Drop NarwhalRAT on Korean PCsSecurityOnline

Sun 10 May1 article

12:31
Backdoored PyTorch Lightning Package Drops Credential StealerSecurity Affairs

Tue 5 May2 articles

15:21
North Korean Hackers Trojanise Korean Gaming Site to Spy on UsersInfosecurity
10:00
ScarCruft deploys Android BirdCall backdoor via sqgame.netThe Hacker News

Mon 13 Apr1 article

10:32
North Korea APT37 uses fake Facebook to spread RokRAT via PDFThe Hacker News

Mon 2 Mar1 article

12:10
APT37 targets airgapped systems using five tools in Ruby JumperSecurityWeek

Fri 27 Feb1 article

13:26
ScarCruft Ruby Jumper uses Zoho C2 to hit air-gapped targetsThe Hacker News · first report