Title: North Korean Hackers Launch Social Engineering Attack Using Facebook
Date: April 13, 2026
Author: Ravie Lakshmanan
A recent cybersecurity incident has revealed a sophisticated malware attack attributed to the North Korean hacking group APT37, also known as ScarCruft. The attackers utilized social engineering tactics on Facebook to build trust with their targets before delivering a remote access trojan (RokRAT) disguised as a PDF viewer.
The campaign involved creating fake Facebook accounts to connect with potential victims, luring them into conversations on Messenger. Victims were tricked into downloading a compromised version of Wondershare PDFelement, which contained malicious code. This malware can capture screenshots, execute commands, and evade detection.
Those affected include individuals and organizations that engage on social media platforms. The impact is significant, as the malware can lead to data breaches and unauthorized access to sensitive information.
To protect against such threats, users should verify the authenticity of software before downloading, avoid unsolicited friend requests, and maintain updated security software.
Risk Level: High
Source: View Original Report
