Microsoft Threat Intelligence (Microsoft Security Blog)
Emerald Sleet spear-phishing of experts on North Korea and use of LLMs · 2024-02-14T12:00:00+00:00 (published_time)
Emerald Sleet (THALLIUM) is a North Korean threat actor that has remained highly active throughout 2023. Their recent operations relied on spear-phishing emails to compromise and gather intelligence from prominent individuals with expertise on North Korea. Microsoft observed Emerald Sleet impersonating reputable academic institutions and NGOs to lure victims into replying with expert insights and commentary about foreign policies related to North Korea. ... All accounts and assets associated with Emerald Sleet have been disabled.