DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Moonstone Sleet fake companies StarGlow Ventures and C.C. Waterfall email campaigns

Date (as written)
2024-05-28T16:00:00+00:00 (published_time)
Year
2024
Actors (as written)
Moonstone Sleet
Actor pages
Moonstone Sleet
Tags (as written)
sectors: education and software development; higher education

Source entries (1)

Microsoft Threat Intelligence (Microsoft Security Blog)

Moonstone Sleet fake companies StarGlow Ventures and C.C. Waterfall email campaigns · 2024-05-28T16:00:00+00:00 (published_time)
From January to April 2024, Moonstone Sleet’s fake company StarGlow Ventures posed as a legitimate software development company. The group used a custom domain, fake employee personas, and social media accounts, in an email campaign targeting thousands of organizations in the education and software development sectors. ... In this campaign, Moonstone Sleet emailed higher education organizations, claiming the company was either hiring new developers or looking for business collaboration opportunities.
https://www.microsoft.com/en-us/security/blog/2024/05/28/moonstone-sleet-emerges-as-new-north-korean-threat-actor-with-new-bag-of-tricks/

Suggest a correction on GitHub