Professionals and organizations in the cryptocurrency, venture capital, and blockchain sectors

Date (as written): 16/04/2026
Year: 2026
Country: Global
Actors (as written): Sapphire Sleet (a.k.a. BlueNoroff, APT38, Stardust Chollima)
Actor pages: Sapphire Sleet
Tags (as written): Attack: Malware; Target Class: Transportation; Attack Class: Cyber Espionage Cyber Crime; Initial Access: T1204.002 - User Execution: Malicious File
Dollar figures (as written): $6.6B

Source entries (1)

Hackmageddon cyber attacks timelines (Paolo Passeri)

Professionals and organizations in the cryptocurrency, venture capital, and blockchain sectors · 16/04/2026

Researchers at Proofpoint observe threat actors breaking into shipping/logistics companies' systems to impersonate firms and steal cargo by rerouting deliveries; losses reached $6.6B in 2025. [Date Occurred: 'Recently'; Date Discovered: 'Recently']

https://www.hackmageddon.com/2026/05/08/16-30-april-2026-cyber-attacks-timeline/

https://docs.google.com/spreadsheets/d/e/2PACX-1vTbUD4I3wQ1E1jETF6dbBelX6hJcQlgbij6JChX-YeotprThdKtAQeN9ejPXdVBeiQDhudcNBWK5HlY/pub?gid=1060075184&single=true&output=csv

https://www.securityweek.com/north-korean-hackers-use-applescript-clickfix-in-fresh-macos-attacks/

Suggest a correction on GitHub