Skip to content
Auto-CTI
Back to all actors

APT37

Nation-state Espionage Dormant
Mentions
1
First seen
16 Jun 2026
Last seen
16 Jun 2026

Relevant to you ยท Relevant

Threat focus:
espionage / aptindustrial / ot espionage
Sector / region:
Manufacturing

Origin

Unattributed

Sources

inferred Confidence high

Profile

APT37 is a North Korean cyber espionage group. Recent reporting describes how the group uses fake Microsoft alerts to deploy NarwhalRAT malware. Further details on targeted sectors and countries are not provided in this headline.

Associated malware / tools

NarwhalRAT

Activity (8 weeks)

22
23
24
25
26
27
28
29

Recent activity

ESC

โ€ฆ