Tag: Onyx Sleet

Onyx Sleet uses array of malware to gather intelligence for North Korea

Posted on

On July 25, 2024, the United States Department of Justice (DOJ) indicted an individual linked to the North Korean threat actor that Microsoft tracks as Onyx Sleet. Microsoft Threat Intelligence collaborated with the Federal Bureau of Investigation (FBI) in tracking Read More …

Multiple North Korean threat actors exploiting the TeamCity CVE-2023-42793 vulnerability

Posted on

Since early October 2023, Microsoft has observed two North Korean nation-state threat actors – Diamond Sleet and Onyx Sleet – exploiting CVE-2023-42793, a remote-code execution vulnerability affecting multiple versions of JetBrains TeamCity server. TeamCity is a continuous integration/continuous deployment (CI/CD) Read More …