Tag: APT37

The APT37 data-wiping attack highlights how North Korean operators weaponise trusted Android features after stealing account credentials. The group uses spear-phishing to compromise victims, then triggers remote wipes through Find Hub to destroy evidence and obstruct recovery. How APT37 Gains Initial Access Attackers begin with targeted KakaoTalk messages crafted to resemble legitimate communication from Korean…