North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware

North Korea's hacking group APT37 (ScarCruft) conducted a social engineering campaign via Facebook, using friend requests to deliver RokRAT malware. The multi-stage attack exploited trust-building on the platform to deploy a remote access trojan.