Moonstone Sleet trojanized PuTTY via LinkedIn, Telegram and freelancing platforms (August 2023)

Date (as written): 2024-05-28T16:00:00+00:00 (published_time)
Year: 2024
Actors (as written): Moonstone Sleet (formerly Storm-1789)
Actor pages: Moonstone Sleet
Tags (as written): social engineering

Source entries (1)

Microsoft Threat Intelligence (Microsoft Security Blog)

Moonstone Sleet trojanized PuTTY via LinkedIn, Telegram and freelancing platforms (August 2023) · 2024-05-28T16:00:00+00:00 (published_time)

In early August 2023, Microsoft observed Moonstone Sleet delivering a trojanized version of PuTTY, an open-source terminal emulator, via apps like LinkedIn and Telegram as well as developer freelancing platforms.

https://www.microsoft.com/en-us/security/blog/2024/05/28/moonstone-sleet-emerges-as-new-north-korean-threat-actor-with-new-bag-of-tricks/

Suggest a correction on GitHub