Who is Subgroup: Pat Bear, APT-C-37?

Subgroup: Pat Bear, APT-C-37 is a threat actor attributed to Syria, also known as Pat Bear, APT-C-37, Racquet Bear. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does Subgroup: Pat Bear, APT-C-37 exploit?

Specific CVE exploitation data for Subgroup: Pat Bear, APT-C-37 is being tracked. Check the Strobes VI threat actor profile for updates.

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

Subgroup: Pat Bear, APT-C-37

Also known as: Pat Bear, APT-C-37, Racquet Bear

SyriaInformation theft and espionage

Exploited CVEs

Overview

A subgroup of Syrian Electronic Army (SEA), Deadeye Jackal . ( Qihoo 360 ) Since October 2015, the Pat Bear Organization (APT-C-37) has launched a well-organized, targeted and persistent attack against the “Islamic State”. Watering hole was used to delivery sample in this attack. The malicious samples were mainly disguised as chat software and some common software in specific fields. This Trojan has many functions such as stealing messages, contacts, WhatsApp and Telegram data, and uploading files using FTP. After reversing and correlation, we found that there is a strong correlation between the Pat Bear Organization and the Golden Rat issue, so this attack activity belongs to another branch of the Syrian Electronic Army.

Exploited Vulnerabilities

No exploited CVEs have been attributed to this threat actor yet.

Browse CVE Database