APT37, a North Korean-aligned threat actor, has been active since at least 2012, predominantly targeting South Korean individuals associated with the North Korean regime or human rights activism. Recent campaigns have showcased a notable evolution in their cyber tactics, most prominently through the introduction of a new Rust-based backdoor, termed Rustonotto. This marks a significant shift, as it is the first known instance of APT37 utilizing Rust-compiled malware to breach Windows systems. The threat actor orchestrates its malware arsenal through a single command-and-control (C2) server, employing various components including FadeStealer, a surveillance tool noted for its ability to log keystrokes, capture screenshots and audio, and exfiltrate data.