2025-11-24
Bitdefender
The Korean Leaks – Analyzing the Hybrid Geopolitical Campaign Targeting South Korean Financial Services With Qilin RaaS
#MoonstoneSleet
#Ransomware
MoonstoneSleet
"Microsoft has identified a new North Korean threat actor, now tracked as Moonstone Sleet (formerly Storm-1789), which combines tried-and-true techniques used by other North Korean threat actors with unique attack methodologies to target companies for financial and cyberespionage objectives. Moonstone Sleet sets up fake companies and job opportunities to engage with potential targets, employs trojanized versions of legitimate tools, creates fully functional malicious games, and delivers custom ransomware."
- CyberMaterial, https://cybermaterial.com/moonstone-sleet-storm-1789-threat-actor/