Microsoft: 'Moonstone Sleet' APT Melds Espionage, Financial Goals

Microsoft researchers identified 'Moonstone Sleet,' a North Korean threat actor combining espionage and financially motivated cybercrime. The group uses social-engineering lures (fake companies, job offers), trojanized software distributed via social platforms and freelancer sites, malicious npm packages, a functional fake video game (DeTankWar) that drops malicious DLLs loaded by a custom loader (YouieLoad), and custom ransomware (FakePenny). Targets include aerospace, education, and software organizations; Microsoft recommends layered defenses (EDR, network/tamper protections, and threat hunting).