ScarCruft, also known as APT37, is a North Korean state-sponsored hacking group known for spear-phishing campaigns and deploying malware like RokRAT and NarwhalRAT. They target individuals and organizations in South Korea and beyond, often using social engineering lures.