2025-03-06
Microsoft
Moonstone Sleet deploying Qilin ransomware at a limited number of orgs
#MoonstoneSleet
#Qilin
#Ransomware
MoonstoneSleet
"Microsoft has identified a new North Korean threat actor, now tracked as Moonstone Sleet (formerly Storm-1789), which combines tried-and-true techniques used by other North Korean threat actors with unique attack methodologies to target companies for financial and cyberespionage objectives. Moonstone Sleet sets up fake companies and job opportunities to engage with potential targets, employs trojanized versions of legitimate tools, creates fully functional malicious games, and delivers custom ransomware."
- CyberMaterial, https://cybermaterial.com/moonstone-sleet-storm-1789-threat-actor/
Also known as
Name | Named by | AKA | First seen | Last seen |
---|---|---|---|---|
DiamondSleet | Microsoft | Zinc | 2023-04-19 | 2024-02-27 |
MoonstoneSleet | Microsoft | DiamondSleet | 2024-05-28 | 2025-03-06 |
Storm-1789 | Microsoft | MoonstoneSleet | 2024-05-28 | 2024-05-28 |
StressedPungsan | Datadog | MoonstoneSleet | 2024-07-31 | 2024-08-01 |