| publication date not shown on page (covers activity since June 2023) | Sapphire Sleet compromises of employees at cryptocurrency, venture capital and financial organizations | | Sapphire Sleet |
| Microsoft Digital Defense Report 2023 | Sapphire Sleet fake LinkedIn investor profiles targeting blockchain-related targets | | Sapphire Sleet |
| Microsoft Digital Defense Report 2023 | Ruby Sleet, Diamond Sleet, and Sapphire Sleet targeting maritime and shipbuilding sector (November 2022 to January 2023) | | Ruby Sleet; Diamond Sleet; Sapphire Sleet |
| 2024-11-22T11:00:00+00:00 (published_time) | Sapphire Sleet cryptocurrency theft (fake venture capitalist / recruiter schemes) | | Sapphire Sleet |
| Microsoft Digital Defense Report 2024 | Jade Sleet, Sapphire Sleet, and Citrine Sleet targeting cryptocurrency organizations (since 2023) | | Jade Sleet; Sapphire Sleet; Citrine Sleet |
| 2025-01-20 | Unknown Jan 2025 | | |
| 2025-01-26 | Dimitra Token | | |
| 2025-02-05 | Russell | | |
| 2025-02-05 | Unknown Feb 2025 | | |
| 2025-02-18 | Individual 0xpeet | | |
| 2025-02-28 | Founder/CEO of A6 | | |
| 2025-02-28 | Fantom Reuse Address | | |
| 2025-03-07 | Founder/CEO of B3 | | |
| 2025-03-14 | Huge March 2025 Theft | | |
| 2025-04-23 | April 2025 Theft | | |
| 2025-05-16 | Unknown JUP Holder | | |
| 2025-05-19 | MarketAcross | | |
| 2025-05-20 | Individual M6 | | |
| 2025-05-24 | TAO Founder | | |
| 2025-06-12 | Medhi | | |
| 2025-06-12 | June 12 2025 Theft | | |
| 2025-06-14 | Clober | | |
| 2025-06-21 | June 21 2025 Theft | | |
| 2025-06-22 | Sololabs | | |
| 2025-06-26 | June 26 2025 Theft | | |
| 2025-06-30 | June 30 2025 Theft | | |
| 2025-07-04 | Individual DD | | |
| 2025-08-06 | Aug 2025 Theft from Individual | | |
| 2025-08-08 | Newfuture | | |
| 2025-08-13 | Rena | | |
| 2025-09-01 | OlaXBT | | |
| 2025-09-01 | Venus Whale | | |
| 2025-09-06 | Individual AN5 | | |
| 2025-09-09 | JP Thor | | |
| 2025-09-12 | Sep 12 Theft | | |
| 2025-09-19 | Ross Gates | | |
| 2025-09-19 | Sep 19 Theft | | |
| 2025-09-22 | UXLINK | | |
| 2025-09-27 | September 27 2025 Theft | | |
| 2025-09-29 | September 29 2025 Theft | | |
| 2025-10-01 | October 1 2025 Theft | | |
| 2025-06-18T05:00:00.000Z | Inside the BlueNoroff Web3 macOS Intrusion Analysis (Feeling Blue(Noroff)) | | TA444 aka BlueNoroff, Sapphire Sleet, COPERNICIUM, STARDUST CHOLLIMA, CageyChameleon |
| 2026-08 | arrayref | | Sapphire Sleet |
| 2026-07 | ORO | | Sapphire Sleet |
| 2026-06 | Mastra | United States | Sapphire Sleet |
| 2026-01-13 | Fake Teams Jan 2026 | | |
| 2026-01-28 | Unknown Jan 28 2026 | | |
| 2026-02-02 | Fake Sally Feb 2026 | | |
| 2026-02-11 | Rage Guy Theft | | |
| 2026-02-12 | Unknown Feb 12 2026 | | |
| 2026-03-04 | MrCable0x | | |
| 2026-03-20 | March 20 2026 Theft | | |
| 2026-04-09 | April 9 2026 Theft | | |
| 2026-04-23 | Apr 23 2026 Theft | | |
| 2026-05-05 | May 1 2026 Theft | | |
| 2026-05-05 | May 5 2026 Theft | | |
| 2026-06-01 | Korporatio | | |
| 16/04/2026 | Professionals and organizations in the cryptocurrency, venture capital, and blockchain sectors | Global | Sapphire Sleet (a.k.a. BlueNoroff, APT38, Stardust Chollima) |
| 2026-04-16T15:00:00+00:00 (published_time) | Sapphire Sleet macOS intrusion campaign (fake software update / Teams-themed lure) | | Sapphire Sleet |
| Aug 24, 2026 | Axios npm compromise by Sapphire Sleet (in "Shai-Hulud was the best thing to happen to supply chain security") | | Sapphire Sleet (North Korea) |
| 2026-06-17T00:00+03:00 | Axios npm compromise attributed by Microsoft to Sapphire Sleet (mentioned in "Mastra npm Scope Takeover"; Mastra attribution not confirmed) | | Sapphire Sleet (BlueNoroff) |
| 2026-04-24T03:00:00+00:00 | Sapphire Sleet Fake Interview campaign with fake Zoom invites targeting Mac users | | Sapphire Sleet |