APT37 hackers abuse Google Find Hub

APT37 hackers abuse Google Find Hub in Android data-wiping attacks www.bleepingcomputer.com/news/secu…

North Korean hackers are abusing Google’s Find Hub tool to track the GPS location of their targets and remotely reset Android devices to factory settings.

The attacks are primarily targeting South Koreans, and start by approaching the potential victims over KakaoTalk messenger - the most popular instant messaging app in the country.

South Korean cybersecurity solutions company Genians links the malicious activity to a KONNI activity cluster, which “has overlapping targets and infrastructure with Kimsuky and APT37.”

Edward Kiledjian @ekiledjian