Threat Intelligence4 min read
APT37 Exploits Facebook Friendships to Deploy RokRAT
North Korean threat actors are befriending targets on Facebook, building trust over weeks, then delivering RokRAT malware through trojanized PDF readers. Military and government officials targeted.
Alex KowalskiApr 29, 2026