External Publication
Visit Post

North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware

The Hacker News | #1 Trusted Source for Cybersecurity News [Uno… April 13, 2026
Source
The North Korean hacking group tracked as APT37 (aka ScarCruft) has been attributed to a fresh multi-stage, social engineering campaign in which threat actors approached targets on Facebook and added them as friends on the social media platform, turning the trust-building exercise into a delivery channel for a remote access trojan called RokRAT. "The threat actor used two Facebook

Discussion in the ATmosphere

Loading comments...