“Casting Call” for Malware: APT37 Poses as TV Writers to Hack Targets

“Casting Call” for Malware: APT37 Poses as TV Writers to Hack Targets

The Artemis campaign is a sophisticated cyber-espionage effort by North Korea-linked APT37, targeting individuals by posing as media personnel and delivering malicious HWP files. The operation employs advanced evasion techniques, including legitimate process masquerading and multi-cloud infrastructure, to bypass detection. #APT37 #ArtemisCampaign

Keypoints

  • The threat group impersonates TV production staff to lure victims with targeted emails.
  • Malicious HWP files are used as weaponized documents disguised as interview guides.
  • Attackers leverage legitimate system processes and DLL side-loading to evade antivirus detection.
  • Digital breadcrumbs connect the campaign to previous activity through cloud account analysis.
  • Organizations are advised to use real-time EDR monitoring to detect subtle attack behaviors.

Read More: https://securityonline.info/casting-call-for-malware-apt37-poses-as-tv-writers-to-hack-targets/