APT37 Launches Targeted Cyberattack Using Social Media and Tampered Software

**APT37** has launched an active targeted intrusion campaign against defense-related organizations using social media (e.g., Facebook), encrypted messaging apps (Telegram), and a tampered Wondershare PDFelement installer to deliver malicious activity aimed at data exfiltration; the campaign relies on advanced social engineering and stealthy techniques, and defenders are advised to deploy behavior-based EDR to detect process injection and related malicious behaviors.