Operation HanKook Phantom: APT37 Spear-Phishing Campaign

North Korean APT37 is actively targeting South Korean government, academic, and research sectors with sophisticated spear-phishing campaigns that use malicious LNK files, fileless PowerShell execution, and stealthy cloud-based exfiltration to conduct long-term espionage and intelligence theft.