APT37
2018-04-18 • MITRE •
APT37 is identified by MITRE as a North Korean state-sponsored cyber espionage group active since at least 2012. The group has primarily targeted South Korea, with additional victim activity reported in Japan, Vietnam, Russia, Nepal, China, India, Romania, Kuwait, and parts of the Middle East. The excerpt links APT37 to campaigns from 2016 to 2018 including Operation Daybreak, Operation Erebus, Golden Time, Evil New Year, Are you Happy?, FreeMilk, North Korean Human Rights, and Evil New Year 2018. MITRE also notes that North Korean group definitions overlap significantly, with some researchers reporting all North Korean state-sponsored cyber activity under Lazarus rather than separate clusters.