Scarcruft

2016-06-17 • Kaspersky • Operation Daybreak

26

Related Actors
45

Related Reports

Related Actors

APT-C-28

Qihoo360

Scarcruft

First seen: Jun 2019

Last seen: Feb 2026

APT37

Mandiant

Scarcruft

First seen: Feb 2018

Last seen: Jun 2026

Black Shoggoth

PWC

APT37

First seen: Mar 2020

Last seen: Feb 2021

DEV-0215

Microsoft

Scarcruft

First seen: Nov 2022

Last seen: Nov 2022

금성121

ESTSecurity

Scarcruft

First seen: May 2018

Last seen: Sep 2023

G0067

MITRE

APT37

First seen: Apr 2018

Last seen: Apr 2018

Group123

Cisco Talos

Scarcruft

First seen: Jan 2018

Last seen: May 2025

Inky Squid

Volexity

Scarcruft

First seen: Aug 2021

Last seen: Jan 2023

Moldy Pisces

Paloalto Networks

TEMP.Reaper

First seen: Sep 2021

Last seen: Sep 2021

TA-Red Ant

Ahnlab

Red Eyes

First seen: Oct 2024

Last seen: Jun 2026

TEMP.Reaper

Mandiant

Scarcruft

First seen: Feb 2018

Last seen: Apr 2024

Red Eyes

Ahnlab

Scarcruft

First seen: Mar 2018

Last seen: May 2024

Ricochet Chollima

Crowd Strike

Scarcruft

First seen: Feb 2019

Last seen: Jan 2026

Sector A02

NSHC

Scarcruft

First seen: Mar 2020

Last seen: Apr 2025

Squid Werewolf

Bi Zone

APT37

First seen: Mar 2025

Last seen: Mar 2025

Earth Manticore

Trend Micro

APT37

First seen: Mar 2025

Last seen: Apr 2026

Chinopu NK

S2W

Scarcruft

First seen: Aug 2025

Last seen: Aug 2025

Dogpu NK

S2W

Scarcruft

First seen: Aug 2025

Last seen: Aug 2025

pu NK-006

S2W

Scarcruft

First seen: Aug 2025

Last seen: Aug 2025

APT-Q-3

Qianxin

Group123

First seen: Mar 2022

Last seen: Jul 2023

Nickel Foxcroft

Secure Works

Scarcruft

First seen: May 2023

Last seen: Oct 2024

Lawrencium

Microsoft

DEV-0215

First seen: Apr 2023

Last seen: Apr 2023

Pearl Sleet

Microsoft

Lawrencium

First seen: Apr 2023

Last seen: Apr 2023

UCID902

Inter Lab

금성121

First seen: Apr 2023

Last seen: Feb 2025

ITG10

IBM

Scarcruft

First seen: Jun 2023

Last seen: Jun 2023

ATK4

Thales Group

APT37

First seen: Oct 2019

Last seen: May 2022

Related Reports

Top Authors

View all reports in this cluster

2026-05-28

ESET

ESET APT Activity Report Q4 2025–Q1 2026

#Andariel #DreamJob #DangerousPassword #DeceptiveDevelopment #Scarcruft #Rook #T1513

2026-05-05

ESET

A rigged game: ScarCruft compromises gaming platform in a supply-chain attack

#Scarcruft #BirdCall

2026-02-06

S2W

Scarcruft’s ROKRAT Malware: Recent Changes

#RokRAT #Scarcruft

2026-02-03

S2W

스카크러프트 악성코드(Scarcruft ROKRAT): 새로운 유포 방식의 출현

#RokRAT #Scarcruft

2026-01-14

Plainbit

바로가기 악성파일의 구조를 활용한 공격자 프로파일링

#Kimsuky #Konni #LNK #Scarcruft

2025-12-22

FSI

국가배후 해킹조직의 LNK 악성코드 위협 분석 (Campaign Dark Prism)

#DarkPrism #LNK #Whitepaper #Kimsuky #Konni #Scarcruft

2025-08-07

S2W

ScarCruft’s New Language: Whispering in PubNub, Crafting Backdoor in Rust, Striking with Ransomware

#ChinopuNK #DogpuNK #LNK #Ransomware #Scarcruft #puNK-006 #VCD

2025-01-20

lazarusholic

An exploratory analysis of the DPRK cyber threat landscape using publicly available reports

#Andariel #Bluenoroff #Kimsuky #Konni #Lazarus #Scarcruft

2024-12-11

Lookout

Unmasking State-Sponsored Mobile Surveillance Malware from Russia, China, and North Korea

#Mobile #Kimsuky #KoSpy #Scarcruft #Slides

2024-12-11

Lookout

Unmasking State-Sponsored Mobile Surveillance Malware from Russia, China, and North Korea

#Mobile #Slides #Kimsuky #KoSpy #Scarcruft

2024-11-29

S2W

Introduction to the North Korea-backed Scarcruft ROKRAT Malware Cluster

#CloudMensis #RokRAT #Scarcruft

2024-11-08

ESET

ESET APT Activity Report Q2 2024–Q3 2024

#CitrineSleet #Kimsuky #Lazarus #Scarcruft #Trend #T1566.001 #T1190 #T1091 #T1212 #T1189 #T1566.002 #T1659

2024-06-19

Malspace

North Korean APTs and Russian Rockets

#Podcast #Scarcruft

2024-05-22

errbody

DPRK-Research

#Konni #Kimsuky #Scarcruft #RokRAT

2024-05-15

ESET

ESET APT Activity Report Q4 2023–Q1 2024

#Trend #WebLogTea #Andariel #Kimsuky #Konni #Scarcruft

View all reports in this cluster