Also known as: Reaper, Group 123
Believed to operate out of: North Korea
Usual targets: South Korean government, military, and defense industrial base
Behavior: Scarcruft, or Reaper (not to be confused with the IoT botnet named Reaper) has so far been less prolific, but is starting to cause concern, according to researchers. Up until now, the group hadn't demonstrated strong sophistication or focus outside the Korean peninsula. Now the group has been linked to latest Adobe Flash zero-day, a sign that it is growing in strength. Hultquist says Scarcruft has been seen doing strategic Web compromises, specifically on websites related to North Korean interests like unification or defectors.
(Image: Welburnstuart via Shutterstock)
