DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Moonstone Sleet

Date (as written)
May 2024
Year
2024
Country
Aerospace and defense industry firms
Actors (as written)
Believed to be associated with the North Korean government
Actor pages
Believed to be associated with the North Korean government
Tags (as written)
Financial Theft; Private sector

Source entries (1)

CFR Cyber Operations Tracker

Moonstone Sleet · May 2024
Moonstone Sleet is a North Korean threat actor that has previously been observed deploying ransomware on aerospace and defense systems.
https://www.cfr.org/cyber-operations/moonstone-sleet
https://www.microsoft.com/en-us/security/blog/2024/05/28/moonstone-sleet-emerges-as-new-north-korean-threat-actor-with-new-bag-of-tricks/

Values found later for empty fields

dollar figures: $6.6M USD in BTC
The ransom demand was $6.6M USD in BTC.
https://www.microsoft.com/en-us/security/blog/2024/05/28/moonstone-sleet-emerges-as-new-north-korean-threat-actor-with-new-bag-of-tricks/

Suggest a correction on GitHub