[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faUb3hm8EpBgGSg4pOkZY2Ti2r69BUC0D2AEmKTpx8jg":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":25,"country":26,"suspected_sponsor":27,"target_industries":28,"target_countries":31,"incident_types":35,"references":36,"techniques":52,"technique_count":93,"created_at":94,"seoMetadata":95,"schemaOrg":99},"APT37","apt37",[9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24],"APT 37","Group 123","Group123","InkySquid","Operation Daybreak","Operation Erebus","Reaper Group","Reaper","Red Eyes","Ricochet Chollima","ScarCruft","Venus 121","ATK4","G0067","Moldy Pisces","APT-C-28","APT37 has likely been active since at least 2012 and focuses on targeting the public and private sectors primarily in South Korea. In 2017, APT37 expanded its targeting beyond the Korean peninsula to include Japan, Vietnam and the Middle East, and to a wider range of industry verticals, including chemicals, electronics, manufacturing, aerospace, automotive and healthcare entities","KP","Korea (Democratic People's Republic of)",[29,30],"Government","Private sector",[32,33,34],"Republic of Korea","Japan","Vietnam",[],[37,38,39,40,41,42,43,44,45,46,47,48,49,50,51],"https:\u002F\u002Fwww.volexity.com\u002Fblog\u002F2021\u002F08\u002F17\u002Fnorth-korean-apt-inkysquid-infects-victims-using-browser-exploits\u002F","https:\u002F\u002Fwww.fireeye.com\u002Fblog\u002Fthreat-research\u002F2018\u002F02\u002Fapt37-overlooked-north-korean-actor.html","https:\u002F\u002Fwww2.fireeye.com\u002Frs\u002F848-DID-242\u002Fimages\u002Frpt_APT37.pdf","http:\u002F\u002Fblog.talosintelligence.com\u002F2018\u002F01\u002Fkorea-in-crosshairs.html","https:\u002F\u002Ftwitter.com\u002Fmstoned7\u002Fstatus\u002F966126706107953152","https:\u002F\u002Fwww.cfr.org\u002Finteractive\u002Fcyber-operations\u002Fapt-37","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Freport-ties-north-korean-attacks-to-new-malware-linked-by-word-macros\u002F","https:\u002F\u002Funit42.paloaltonetworks.com\u002Funit42-freemilk-highly-targeted-spear-phishing-campaign\u002F","https:\u002F\u002Fblog.talosintelligence.com\u002F2018\u002F01\u002Fkorea-in-crosshairs.html","https:\u002F\u002Fattack.mitre.org\u002Fgroups\u002FG0067\u002F","https:\u002F\u002Fsecurelist.com\u002Fcve-2016-4171-adobe-flash-zero-day-used-in-targeted-attacks\u002F75082\u002F","https:\u002F\u002Fsecurelist.com\u002Foperation-daybreak\u002F75100\u002F","https:\u002F\u002Fsecurelist.com\u002Fscarcruft-continues-to-evolve-introduces-bluetooth-harvester\u002F90729\u002F","https:\u002F\u002Fthreatpost.com\u002Fscarcruft-apt-group-used-latest-flash-zero-day-in-two-dozen-attacks\u002F118642\u002F","https:\u002F\u002Funit42.paloaltonetworks.com\u002Fatoms\u002Fmoldypisces\u002F",[53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92],"T1204","T1548","T1548.002","T1071","T1071.001","T1123","T1547","T1547.001","T1059","T1059.003","T1059.005","T1059.006","T1555","T1555.003","T1005","T1561","T1561.002","T1189","T1203","T1105","T1559","T1559.002","T1036","T1036.001","T1106","T1027","T1027.003","T1120","T1566","T1566.001","T1057","T1055","T1053","T1053.005","T1082","T1033","T1529","T1204.002","T1102","T1102.002",40,"2023-08-09T17:25:09.409843+00:00",{"title":96,"metaDescription":97,"keywords":98},"APT37 Threat Actor Profile | Precursor Intelligence","APT37 has likely been active since at least 2012 and focuses on targeting the public and private sectors primarily in South Korea. In 2017, APT37 expa...","APT37, APT 37, Group 123, Group123, InkySquid, Operation Daybreak, Operation Erebus, Reaper Group, Reaper, Red Eyes, Ricochet Chollima, ScarCruft, Venus 121, ATK4, G0067, Moldy Pisces, APT-C-28, threat actor, APT, cyber threat, threat intelligence, Government, Private sector, Korea (Democratic People's Republic of), KP",{"@context":100,"@type":101,"name":6,"alternateName":102,"description":25,"url":103,"mainEntityOfPage":104,"location":106},"https:\u002F\u002Fschema.org","Organization",[9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24],"http:\u002F\u002Flocalhost:3000\u002Fthreat-actors\u002Fapt37",{"@type":105,"@id":103},"WebPage",{"@type":107,"name":26},"Country"]