Opal Sleet is a North Korea-linked advanced persistent threat (APT) group primarily driven by cyber espionage and data exfiltration, with objectives also encompassing financial gain and disruption of adversarial technological advancements. First documented in 2014, the group is frequently referred to by aliases such as Konni, OSMIUM, Vedalia, TA406, and APT37. Opal Sleet distinguishes itself through its adaptable tactics, including the use of AI-generated PowerShell backdoors and novel exploitation of legitimate services like Google Find Hub for remote device wiping, indicating a continuous evolution in its operational methods.

Aliases del actor

KonniOSMIUMVedalia

Actores similares

apt-onyxsleetactor · 1Moonstone Sleetactor · 1moonstone-sleetactor · 1Pearl Sleetapt · 0Ruby Sleetapt · 0