Microsoft links North Korean hackers to new FakePenny ransomware

**Moonstone Sleet (Storm-1789)** — Microsoft attributes a North Korean-linked actor, Moonstone Sleet, with expanded tradecraft that includes trojanized applications, social engineering via fake companies, custom loaders, and the recent use of FakePenny ransomware (demanding $6.6M BTC) after prolonged network access; the group targets multiple sectors (software/IT, education, defense) and shows both espionage and financially-motivated activity, indicating evolved capabilities and concurrent operations with other North Korean actors.