Genians analyzes APT37 reconnaissance activity against South Korea, including collection of target IP address, location, web browser, and operating-system details before endpoint compromise. The report links the activity to prepared threat infrastructure and notes that the actor has repeatedly used malicious LNK files as a core delivery strategy. It recommends endpoint telemetry and behavioral detection because this reconnaissance phase can precede targeted espionage against North Korean human-rights groups, defectors, journalists, and policy or defense specialists.