logo

North Korea building cash reserves using ransomware, video games

ID: 9b05c44e-fc17-5d05-8114-6b8761813c6d

STIX ID: report--9b05c44e-fc17-5d05-8114-6b8761813c6d

Feed Name: The Register (Security)

Threat Score
90/100

Date Published: 2024-05-29

Date Updated: 2026-04-26

Author: Connor Jones

...
...

Microsoft attributes a new North Korean cybercrime/espionage group, "Moonstone Sleet," to targeted job-scam and fake-company campaigns that distribute trojanized PuTTY and SumatraPDF to gain access, steal credentials and IP, and deploy a custom ransomware called FakePenny (observed April 2024) demanding about $6.6M; the actor leverages LinkedIn, Telegram, freelancing platforms and long-term compromises against organizations including a defense technology firm.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.