Threat Intelligence / Actor / APT37 / ScarCruft

APT37 / ScarCruft

Nation: North Korea · 1 tracked threat(s) · Categories: APT

Also known as: ScarCruft, APT37, Reaper, Group123, InkySquid, RedEyes, Ricochet Chollima, Geumseong121, Ruby Sleet

Tracked threats

ScarCruft (APT37) BirdCall Android Variant — Multiplatform Supply-Chain Attack via sqgame[.]com[.]cn Targeting Yanbian Ethnic Koreans — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence