SHROUDED#SLEEP: North Korea’s Silent Cyber Assault on Southeast Asia

An ongoing cyber espionage campaign, dubbed SHROUDED#SLEEP, has been attributed to North Korea’s APT37, a well-known advanced persistent threat group. This group has been actively targeting countries across Southeast Asia, with Cambodia emerging as the primary focus. The campaign employs a sophisticated, multi-stage attack sequence that culminates in the deployment of a custom VeilShell PowerShell backdoor, which offers a broad range of Remote Access Trojan (RAT) functionalities.