North Korea’s Lazarus Operates Through Six Distinct Cyber Clusters
Sekoia and Kudelski Security reclassify North Korea's Lazarus umbrella into six clusters spanning espionage, financial theft, and fake IT worker operations.
75
Threat actor
Moonstone Sleet
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 28, 2026
- Last mentionedSep 7, 2026
Timeline
2 articles · newest firstATF confirms cyberattack hit system containing info on its investigation targets
Qilin ransomware group claimed breaching the ATF, exposing data on investigation targets; the agency says a standalone system was hit with no mission impact.
78
Appears with
- Qilinthreat actor · 2
- CryptoCorethreat actor · 1
- BianLianthreat actor · 1
- Andarielthreat actor · 1
- Googleorganization · 1
- Citrine Sleetthreat actor · 1
- Halcyonorganization · 1
- Scattered Spiderthreat actor · 1
- FBIorganization · 1
- GRIBorganization · 1
- Kudelski Securityvendor · 1
- ATFvictim · 1
- Jade Sleetthreat actor · 1
- TEMP.Hermitthreat actor · 1
- Famous Chollimathreat actor · 1
- Department of Justiceorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.