Tag: scarcruft

2 Attack Reports | 0 Vulnerabilities

Attack reports

A security alert regarding APT-C-28 (ScarCruft) using MiradorShell to launch a cyberattack.

A recent investigation reveals that the APT-C-28 (ScarCruft) group has expanded its targets to include the cryptocurrency industry. The group employs sophisticated phishing tactics, using LNK files disguised as PDFs to lure victims with investment proposals ranging from $1-3 million. Upon execution…
backdoor
phishing
scarcruft
2026-02-09
miradorshell
Published: February 9, 2026
Downloadable IOCs: 4

North Korean APT37 Mobile Spyware Discovered

A new Android spyware called KoSpy has been attributed to the North Korean group APT37 (ScarCruft). The malware, active since March 2022, targets Korean and English-speaking users by masquerading as utility apps. KoSpy uses a two-stage C2 infrastructure, retrieving initial configurations from Fireb…
apt
surveillance
north korea
android
spyware
konni
apt37
2025-04-12
scarcruft
kospy
Published: April 12, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports