North Korean actors use AI to scale social engineering and malware
Microsoft rates Jade Sleet, Coral Sleet, and Jasper Sleet as operationalized; operations remain human-directed, not autonomous.
74
Threat actor
Sapphire Sleet
- Mentions · 7d1
- Mentions · 30d2
- All mentions2
- First seenOct 7, 2026
- Last mentioned1d ago
Timeline
2 articles · newest firstEvolution of Web3 in Cloud Supply Chain Attacks
Unit 42 says DPRK-linked actors use Web3 smart contracts as C2 for npm worms stealing cloud credentials.
78
Appears with
- Mastra AIproduct · 1
- ChainDropmalware · 1
- ARTEXmalware · 1
- Shai-Huludmalware · 1
- PolinRidermalware · 1
- Pearl Sleetthreat actor · 1
- Axiosproduct · 1
- Unit 42organization · 1
- Midnight Neptunethreat actor · 1
- Microsoft Defenderproduct · 1
- Onyx Sleetthreat actor · 1
- Coral Sleetthreat actor · 1
- Jade Sleetthreat actor · 1
- Microsoftorganization · 1
- arrayrefproduct · 1
- Diamond Sleetthreat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.