Archive · 22 Dec 2025
North Korea-Backed Hackers Launch Cyber Attack
North Korea-backed hackers, known as APT37, have launched a new cyber attack called 'Artemis'.
They hide bad code inside special computer files called HWP documents, which are commonly used in South Korea.
When someone opens the file and clicks a link, the attack starts.
This group has been doing similar attacks before, using the same file type to get into important computer systems.
In another attack, they used a messaging app called KakaoTalk to spread bad software that could control phones and computers.
They even made these devices delete important things like photos and documents.
The hackers are very good at sneaking around and finding ways to cause trouble.
North Korea-backed hacking group APT37 launched a cyber attack campaign named 'Artemis'.
The attack embeds malicious code in HWP documents, triggering when users open the document and click a hyperlink.
APT37 has previously exploited the HWP format to infiltrate government, military, and key industrial networks in South Korea.
In November, the group launched another attack using KakaoTalk to distribute malware that could remotely control and delete data from Android smartphones and PCs.
The malware used Google's location-based tracking to confirm victims were outside before resetting their devices, delaying detection and response.
- Who
- North Korea-backed hacking group APT37
- What
- Launched a cyber attack campaign named 'Artemis'
- When
- Detected in November, with previous reports in October
- Where
- Targeting South Korea, specifically government, military, and key industrial networks
- Why
- To infiltrate and delete key data from victims' devices
- Hacking Group
- APT37
- Attack Code Name
- Artemis
- Malicious Code Embedded In
- HWP documents
- Trigger Mechanism
- Opening document content and clicking hyperlink
- Targeted Data
- Photos, documents, contact information
- Previous Attack Report
- October report by 38 North
- Recent Attack Date
- November
- Malware Distribution Platform
- KakaoTalk