APT37 uses Facebook, Telegram, and a trojanized PDF installer in a new targeted intrusion campaign
VPN Central [Unofficial]
April 13, 2026
North Korea-linked threat group APT37 has launched a new targeted intrusion campaign that starts on Facebook, shifts to Telegram, and ends with a trojanized PDF installer that quietly compromises the victim. Genians Security Center says the operation relied on trust-building, pretexting, and a tampered Wondershare PDFelement installer to deliver malware without raising immediate suspicion. The […]
The post APT37 uses Facebook, Telegram, and a trojanized PDF installer in a new targeted intrusion campaign appeared first on VPN Central.
Discussion in the ATmosphere