Microsoft Threat Intelligence (Microsoft Security Blog)
Ruby Sleet supply chain attack on a Korean construction company (VeraPort) and aerospace/defense compromises · 2024-11-22T11:00:00+00:00 (published_time)
in December 2023, Microsoft Threat Intelligence observed Ruby Sleet carrying out a supply chain attack in which the threat actor successfully compromised a Korean construction company and replaced a legitimate version of VeraPort software with a version that communicates with known Ruby Sleet infrastructure. ... Ruby Sleet has targeted and successfully compromised aerospace and defense-related organizations.