Microsoft Threat Intelligence (Microsoft Security Blog)
Jasper Sleet and Coral Sleet (formerly Storm-1877) operationalizing AI in remote IT worker activity · 2026-03-06T17:00:00+00:00 (published_time)
this blog highlights observations from North Korean remote IT worker activity tracked by Microsoft Threat Intelligence as Jasper Sleet and Coral Sleet (formerly Storm-1877), where AI enables sustained, large‑scale misuse of legitimate access through identity fabrication, social engineering, and long‑term operational persistence at low cost. ... Microsoft Threat Intelligence has identified and disrupted thousands of accounts associated with fraudulent IT worker activity