The DefendOps DiariesMoonstone Sleet's Shift to Ransomware-as-a-Service: A New Era in Cyber Threats
#moonstonesleet
#ransomwareasaservice
#northkoreanhackers
#cybersecuritytrends
#qilinransomware
lazarusholic"Moonstone Sleet deploying Qilin ransomware at a limited number of orgs" published by Microsoft. #MoonstoneSleet, #Qilin, #Ransomware, #DPRK, #CTI https://archive.is/OeXNz
"Analysis of attack activities of Moonstone sleet a division of APT-C-26 (Lazarus) group" published by BlueEye. #MoonstoneSleet, #PuTTY, #DPRK, #CTI https://blu3eye.gitbook.io/malware-insight/moonstone-sleet-trojaned-putty
"2024 Recap - North Korean Threat Actor Activity" published by PolySwarm. #Chollima, #MoonstoneSleet, #DPRK, #CTI https://blog.polyswarm.io/2024-recap-north-korean-threat-actor-activity
"Dark Web Profile: Moonstone Sleet" published by SOCRadar. #MoonstoneSleet, #DPRK, #CTI https://socradar.io/dark-web-profile-moonstone-sleet/
"A Threat Intelligence Year in Review" published by Microsoft. #MoonstoneSleet, #Trend, #Youtube, #DPRK, #CTI https://www.youtube.com/watch?v=U7p0J8aMZhM
BlueHat 2024: S17: MSTIC - A Threat Intelligence Year in Review
"Microsoft Digital Defense Report 2024" published by Microsoft. #CitrineSleet, #JadeSleet, #MoonstoneSleet, #SapphireSleet, #Trend, #DPRK, #CTI https://www.microsoft.com/en-us/security/security-insider/intelligence-reports/microsoft-digital-defense-report-2024
"APT and financial attacks on industrial organizations in Q2 2024" published by Kaspersky. #Andariel, #Kimsuky, #LilacSquid, #MoonstoneSleet, #SmallTiger, #Trend, #Xctdoor, #DPRK, #CTI https://ics-cert.kaspersky.com/publications/reports/2024/10/03/apt-and-financial-attacks-on-industrial-organizations-in-q2-2024/
APT and financial attacks on industrial organizations in Q2 2024 | Kaspersky ICS CERT
This summary provides an overview of the reports of APT and financial attacks on industrial enterprises that were disclosed in Q2 2024, as well as the related activities of groups that have been observed attacking industrial organizations and critical infrastructure facilities.
"North Korea Still Attacking Developers via npm" published by Phylum. #ContagiousInterview, #MoonstoneSleet, #NPM, #DPRK, #CTI https://blog.phylum.io/north-korea-still-attacking-developers-via-npm/
The Threat CodexStressed Pungsan: DPRK-aligned threat actor leverages npm for initial access
#MoonstoneSleet
https://securitylabs.datadoghq.com/articles/stressed-pungsan-dprk-aligned-threat-actor-leverages-npm-for-initial-access/
#MoonstoneSleet
https://securitylabs.datadoghq.com/articles/stressed-pungsan-dprk-aligned-threat-actor-leverages-npm-for-initial-access/
