APT37__2018__APT37.blog.pdf

FireEye's report profiles APT37 (Reaper), a North Korean-aligned cyber espionage actor observed using zero-day and known vulnerabilities (notably Adobe Flash and HWP), tailored social engineering, strategic web compromises, and torrent-based distribution to target organizations primarily in South Korea and across East Asia and the Middle East; the group employs a diverse malware toolset including espionage and destructive (wiper) capabilities and uses compromised servers, messaging platforms, and cloud services for command-and-control.