DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

North Korean state-sponsored APT groups 'Ruby Sleet' and 'Diamond Sleet' compromised two arms manufacturers in Germany and Israel beginning in November 2022

Date (as written)
01.11.2022
Year
2022
Country
Israel;Germany
Actors (as written)
Ruby Sleet fka CERIUM;Andariel/APT45/Onyx Sleet fka PLUTONIUM/Silent Chollima/Stonefly/G0138/DarkSeoul < Lazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110)
Actor pages
Ruby Sleet fka CERIUMAndarielAPT45Onyx Sleet fka PLUTONIUMSilent ChollimaStoneflyG0138DarkSeoul < Lazarus GroupLabyrinth ChollimaHIDDEN COBRAGuardians of PeaceDiamond Sleet fka ZINCNICKEL ACADEMYNewRomanic Cyber Army TeamWhois Hacking TeamApplewormGroup 77G0032
Tags (as written)
Hijacking without Misuse

Source entries (1)

EuRepoC

North Korean state-sponsored APT groups 'Ruby Sleet' and 'Diamond Sleet' compromised two arms manufacturers in Germany and Israel beginning in November 2022 · 01.11.2022
The North Korean state-sponsored APT groups 'Ruby Sleet' (fka. 'Cerium') and 'Diamond Sleet' (fka. 'Zinc') compromised two arms manufacturers in Germany and Israel during the period of November 2022 to January 2023, Microsoft detailed in a technical report on Chinese and North Korean cyber activity published on 1 September 2023. The report further assesses that the North Korean government assigned multiple threat actors to meet high priority collection requirements for its own military capabilities.
https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RW1aFyW
https://thehackernews.com/2023/09/north-korean-hackers-exploit-zero-day.html

Suggest a correction on GitHub