Tactics, Techniques & Procedures (TTPs): Specializes in social engineering, supply chain compromise, and custom malware (BirdCall, Chinotto). Frequently targets South Korean entities and defectors.

APT37 has demonstrated a remarkable ability to adapt its delivery mechanisms. The recent pivot to gaming platforms (Sqgame) shows a deep understanding of the cultural and digital habits of its targets. By embedding backdoors in legitimate-looking card games, they bypass traditional email-based security controls. Their use of the BirdCall malware, which provides full remote access to both Android and Windows devices, indicates a multi-platform strategy aimed at total surveillance.