CERT24ScarCruft hacked a gaming platform to deploy BirdCall malware on Android and Windows devicesLoading data…
CERT24Threat Observatory
Period

ScarCruft hacked a gaming platform to deploy BirdCall malware on Android and Windows devices

The North Korea-aligned, state-sponsored group ScarCruft compromised the supply chain of sqgame.net, a video game platform used in China’s Yanbian region. Android APKs on the platform were modified to distribute the BirdCall backdoor, and a trojanized DLL was also delivered through a Windows client update from at least November 2024. The source says the campaign likely targeted ethnic Koreans residing in China.

← Back to intelligence

ScarCruft hacked a gaming platform to deploy BirdCall malware on Android and Windows devices

The North Korea-aligned, state-sponsored group ScarCruft compromised the supply chain of sqgame.net, a video game platform used in China’s Yanbian region. Android APKs on the platform were modified to distribute the BirdCall backdoor, and a trojanized DLL was also delivered through a Windows client update from at least November 2024. The source says the campaign likely targeted ethnic Koreans residing in China.