Sapphire Sleet

Sapphire Sleet is a North Korea-linked Advanced Persistent Threat (APT) group known for its malicious activities. As a threat actor, Sapphire Sleet has been identified as the entity behind the execution of actions with harmful intent. The group's operations are sophisticated and persistent, targeting specific organizations or individuals over extended periods to achieve their objectives. The cybersecurity industry has attributed various cyber-attacks to this group, highlighting its significant role in the global cyber threat landscape. Recently, Sapphire Sleet has been found to target IT job seekers through deceptive tactics. They have created bogus skills assessment portals to lure unsuspecting individuals. These fraudulent platforms are designed to extract sensitive information from the victims, potentially leading to identity theft, financial loss, or further exploitation in more elaborate schemes. This new campaign indicates an evolution in Sapphire Sleet's strategies, demonstrating their adaptability and continuous threat to cybersecurity. In addition to the recent attacks on IT job seekers, Sapphire Sleet has a history of targeting financial institutions, cryptocurrency businesses, and ATMs. This group is also known by other names such as Alluring Pisces and APT38, under which it has carried out numerous successful cyber-attacks. Given the group's track record and evolving tactics, it remains a significant concern for cybersecurity professionals and organisations worldwide.