The threat is a supply chain attack where the North Korean APT group ScarCruft (APT37) has trojanized a gaming platform (sqgame[.]net) to distribute backdoored Windows and Android software to its users, primarily targeting ethnic Koreans in China for espionage purposes. The article does not provide a CVSS score, specific affected software versions, fixed versions, or workarounds for this campaign.
A gaming platform built for ethnic Koreans in China has been serving backdoored Windows and Android software to its users since late 2024. The platform, sqgame[.]net, hosts traditional card and board games for a community that sits along the North Korean border and includes many refugees and defectors. ESET researchers tied the operation to ScarCruft, a North Korea-aligned espionage group also tracked as APT37 and Reaper, which has been active since at least 2012. How … More → The post North Korean hackers trojanize gaming platform to spy on ethnic Koreans in China appeared first on Help Net Security .