DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

The North Korean state-aligned hacking group Moonstone Sleet compromised a defence technology company and stole credentials as well as intellectual property in early December 2023

Date (as written)
01.12.2023
Year
2023
Country
Not available
Actors (as written)
Moonstone Sleet / Storm-1789
Actor pages
Moonstone SleetStorm-1789
Tags (as written)
Data theft;Hijacking with Misuse;Ransomware

Source entries (1)

EuRepoC

The North Korean state-aligned hacking group Moonstone Sleet compromised a defence technology company and stole credentials as well as intellectual property in early December 2023 · 01.12.2023
The North Korean state-aligned hacking group Moonstone Sleet (previously tracked as Storm-1789) compromised a defence technology company and stole credentials as well as intellectual property in early December 2023, IT technology company Microsoft reported in a technical report on 28 May 2024. In April 2024, the hacker group deployed the ransomware FakePenny against the same company.
https://www.bleepingcomputer.com/news/microsoft/microsoft-links-moonstone-sleet-north-korean-hackers-to-new-fakepenny-ransomware/
https://www.microsoft.com/en-us/security/blog/2024/05/28/moonstone-sleet-emerges-as-new-north-korean-threat-actor-with-new-bag-of-tricks/
https://www.malwarebytes.com/blog/news/2024/06/a-week-in-security-may-27-june-2-2

Values found later for empty fields

dollar figures: $6.6M USD in BTC
The ransom demand was $6.6M USD in BTC.
https://www.microsoft.com/en-us/security/blog/2024/05/28/moonstone-sleet-emerges-as-new-north-korean-threat-actor-with-new-bag-of-tricks/

Suggest a correction on GitHub