Moonstone Sleet

Moonstone Sleet is a North Korean-linked threat actor engaged in financially motivated attacks and espionage operations. The group previously had significant overlap with the Lazarus Group but has developed distinct tradecraft since 2023. Moonstone Sleet is known for creating fake companies and personas to interact with victims and has developed unique malware, including a variant delivered through a fully functioning game.