North Korea-linked APT group ScarCruft Conducts Supply-Chain Espionage Attack on Gaming Platform
ESET Research has identified a supply-chain espionage attack by the North Korea-aligned APT group ScarCruft, which compromised a gaming platform used by ethnic Koreans in China's Yanbian region. The attack involved malicious updates that deployed the RokRAT and BirdCall backdoors, enabling data collection and surveillance. The goal is likely espionage targeting individuals of interest to the North Korean regime, such as refugees or defectors.
Topics: APT group backdoor cyberattack data collection North Korea supply-chain espionage