#DeFiTankLand

Incident/Operation

2024-05-28 • Moonstone Sleet emerges as new North Korean threat actor with new bag of tricks

DeFiTankLand was a purported decentralized-finance tank game project that appeared in late 2022 and remained nominally active into 2024 or early 2025. Investigators associated its development with BABYLONGROUP, a cluster of suspected DPRK IT workers focused on web3 and blockchain projects. The project formed part of that broader IT-worker ecosystem and preceded the malicious DeTankZone game; the browser exploitation and malware delivery were associated with the later DeTankZone activity.

Tagged Reports

« Back