{"actor":{"id":"apt37","name":"APT37","aliases":["RICOCHET CHOLLIMA","ScarCruft","Group 123","Reaper Group","ATK4","Operation Daybreak","InkySquid","Geumseong121"],"vendor_names":{"mandiant":"APT37","crowdstrike":"VELVET CHOLLIMA","eset":"Reaper","microsoft":"Ruby Sleet","mitre":"G0067","proofpoint":"TA406","secureworks":"IRON TILDEN"},"mitre_gid":"G0067","type":"nation-state","type_verbatim":"nation-state APT","secondary_types":[],"origin":"KP","origins":["KP"],"targets":["CN","DE","EG","FR","GB","HK","ID","IN","JP","KR","RU","SK","UA","US","VN","ZA"],"target_regions":[],"sectors":["aerospace","consulting-professional-services","cryptocurrency","def","edu","energy-utilities","fin","food-and-beverage","gov","hea","logistics","manufacturing-man","med","ngo","oil-and-gas","pharmaceutical","private-sector-generic","ret","tec"],"threat_types":["esp"],"mitre_techniques":["T1005","T1027","T1027.003","T1033","T1036.001","T1053.005","T1055","T1057","T1059","T1059.003","T1059.005","T1059.006","T1071.001","T1102.002","T1105","T1106","T1120","T1123","T1189","T1203","T1529","T1547.001","T1555.003","T1561.002","T1566.001"],"gir_codes":[],"active_since":2012,"brief":null,"attribution_sponsor":null,"attribution_confidence":null,"merged_into":null,"split_from":[],"created_at":"2026-05-20T09:50:16.565199+00:00","updated_at":"2026-07-28T19:52:14.995+00:00","url":"https://aptatlas.net/actors/apt37"},"exports":{"stix":"https://aptatlas.net/api/v1/actors/apt37/stix","navigator":"https://aptatlas.net/api/v1/actors/apt37/navigator"}}