SOCRadar profiles ScarCruft, also known as APT37 or Reaper, as a North Korea associated espionage group active since 2012 and primarily focused on South Korea and other Asian targets linked to Pyongyang's interests. The source describes spear phishing, watering hole compromises, zero day exploitation, weaponized CHM files, oversized LNK delivery for RokRAT, and self decoding payloads used to deploy backdoors. Reported malware includes Dolphin, BLUELIGHT, Chinotto, GOLDBACKDOOR, NOKKI, M2RAT, and RokRat, with capabilities spanning reconnaissance, remote access, credential theft, keylogging, screenshots, and file exfiltration. ScarCruft also uses social networking sites and cloud platforms for C2, making the profile useful for tracking APT37 infrastructure and delivery changes.