DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

A New North Korean Group Emerges, Disrupting the Open-Source Ecosystem (Moonstone Sleet npm packages)

Date (as written)
June 13, 2024
Year
2024
Actors (as written)
Moonstone Sleet; Jade Sleet
Actor pages
Moonstone SleetJade Sleet
Tags (as written)
open-source software supply chain; npm developers

Source entries (2)

Hackmageddon cyber attacks timelines (Paolo Passeri)

Multiple organizations · 13/06/2024
Researchers from Checkmarx reveal the details of Moonstone Sleet, a North Korean threat actor distributing malware through malicious NPM packages. [Date Occurred: During Q1 and Q2 2024; Date Discovered: During Q1 and Q2 2024]
https://www.hackmageddon.com/2024/09/12/1-15-june-2024-cyber-attacks-timeline/
https://www.darkreading.com/cyberattacks-data-breaches/north-koreas-moonstone-sleet-widens-distribution-of-malicious-code-packages

Checkmarx blog

A New North Korean Group Emerges, Disrupting the Open-Source Ecosystem (Moonstone Sleet npm packages) · June 13, 2024
In December 2023, we reported on how North Korean threat actors, particularly Jade Sleet, have been compromising supply chains through the open-source ecosystem ... Moonstone Sleet, a newly identified North Korean threat actor, has entered the scene, targeting the open-source software supply chain
https://checkmarx.com/blog/a-new-north-korean-group-emerges-disrupting-the-open-source-ecosystem/

Suggest a correction on GitHub