2024-09-09
PaloaltoNetworks
Threat Assessment: North Korean Threat Groups
#AlluringPisces
#CollectionRAT
#Comebacker
#Fullhouse
#GleamingPisces
#JumpyPisces
#KANDYKORN
#ObjCShellz
#OdicLoader
#POOLRAT
#PondRAT
#RustBucket
#SelectivePisces
#SlowPisces
#SmoothOperator
#SparklingPisces
SlowPisces
"Slow Pisces is North Korea's nation state threat group under Reconnaissance General Bureau (RGB) of DPRK. It's believed to be a spin-off from the Lazarus group with focus on financial gathering and crypto industry targeting goals. Their primary task since 2020 is generating revenue for the DPRK regime and they do so by targeting organizations that handle large volumes of cryptocurrency. They have reportedly stolen in excess of $1 billion in 2023 alone."
- PaloaltoNetworks, https://unit42.paloaltonetworks.com/threat-actor-groups-tracked-by-palo-alto-networks-unit-42/
Also known as
Name | Named by | AKA | First seen | Last seen |
---|---|---|---|---|
DarkRiver | Ptsecurity | JadeSleet | 2023-09-27 | 2023-09-27 |
JadeSleet | Microsoft | TraderTraitor | 2023-07-18 | 2024-10-15 |
SlowPisces | PaloaltoNetworks | JadeSleet | 2024-06-28 | 2024-09-09 |