North Korean APT group 'Onyx Sleet' targeted Russian University in March 2023

Date (as written): 01.03.2023
Year: 2023
Country: Russia;Russia
Actors (as written): Andariel/APT45/Onyx Sleet fka PLUTONIUM/Silent Chollima/Stonefly/G0138/DarkSeoul < Lazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110)
Actor pages: Andariel APT45 Onyx Sleet fka PLUTONIUM Silent Chollima Stonefly G0138 DarkSeoul < Lazarus Group Labyrinth Chollima HIDDEN COBRA Guardians of Peace Diamond Sleet fka ZINC NICKEL ACADEMY NewRomanic Cyber Army Team Whois Hacking Team Appleworm Group 77 G0032
Tags (as written): Hijacking without Misuse

Source entries (1)

EuRepoC

North Korean APT group 'Onyx Sleet' targeted Russian University in March 2023 · 01.03.2023

The North Korean APT group 'Onyx Sleet' (fka. 'Plutonium') targeted a Russian University in March 2023. The activity was observed as part of what appears to be a larger North Korean effort to gather defense-related intelligence in Russia. At least one device linked to the University was successfully compromised in the attack.

https://www.bleepingcomputer.com/news/security/microsoft-north-korean-hackers-target-russian-govt-defense-orgs/

https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RW1aFyW

https://thehackernews.com/2023/09/north-korean-hackers-exploit-zero-day.html

https://www.govinfosecurity.com/north-korean-hackers-exploiting-critical-flaw-in-devops-tool-a-23350

Suggest a correction on GitHub