External Publication
Visit Post

APT37 uses Facebook, Telegram, and a trojanized PDF installer in a new targeted intrusion campaign

VPN Central [Unofficial] April 13, 2026
Source
North Korea-linked threat group APT37 has launched a new targeted intrusion campaign that starts on Facebook, shifts to Telegram, and ends with a trojanized PDF installer that quietly compromises the victim. Genians Security Center says the operation relied on trust-building, pretexting, and a tampered Wondershare PDFelement installer to deliver malware without raising immediate suspicion. The […] The post APT37 uses Facebook, Telegram, and a trojanized PDF installer in a new targeted intrusion campaign appeared first on VPN Central.

Discussion in the ATmosphere

Loading comments...