DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

AppleJeus malware campaign (fake cryptocurrency trading platform)

Date (as written)
early 2020s
Year
2020
Actors (as written)
Citrine Sleet
Actor pages
Citrine Sleet
Tags (as written)
trojanized application; credential theft

Source entries (1)

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

AppleJeus malware campaign (fake cryptocurrency trading platform) · early 2020s
(MSMT/2025/2, report p. 32) “Citrine Sleet developed notoriety in the early 2020s as a result of its AppleJeus malware campaign, which involved distributing a fake cryptocurrency trading platform that enabled DPRK actors to steal credentials from victims who downloaded it, ultimately enabling theft of cryptocurrency funds.”
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub