Onyx Sleet (7)
Events whose actors field, as written by the source, names this.
| Date (as written) | Incident | Country | Actors |
|---|---|---|---|
| 2023 | Data exfiltrated from "South Korean Defense Company 1" | South Korea | RIM JONG HYOK and Conspirators; RGB cyber unit known as Andariel, Onyx Sleet, and Silent Chollima |
| 2023 | Data exfiltrated from "South Korean Defense Company 2" | South Korea | RIM JONG HYOK and Conspirators; RGB cyber unit known as Andariel, Onyx Sleet, and Silent Chollima |
| publication date not shown on page (covers activity since June 2023) | Ruby Sleet and Onyx Sleet targeting aerospace and defense organizations | United States and South Korea | Ruby Sleet; Onyx Sleet |
| Microsoft Digital Defense Report 2023 | Ruby Sleet, Onyx Sleet and Opal Sleet targeting Russian aerospace institute, university, and diplomatic entities (March 2023) | Russian | Ruby Sleet; Onyx Sleet; Opal Sleet (likely) |
| July 25, 2024 | RGB 3rd Bureau (Andariel) global espionage against defense, aerospace, nuclear, engineering | Andariel, Onyx Sleet (formerly PLUTONIUM), DarkSeoul, Silent Chollima, and Stonefly/Clasiopa (RGB 3rd Bureau) | |
| 25/07/2024 | Organizations in the healthcare, energy and financial sectors | >1 | APT45 a.k.a. Andariel, Onyx Sleet, Stonefly, and Silent Chollima |
| 2024-07-25T15:57:18+00:00 (published_time) | Onyx Sleet intelligence-gathering campaigns; May 2024 targeting of South Korean educational institutions, construction and manufacturing organizations | India, South Korea, and the United States; South Korean | Onyx Sleet |