Threat Intelligence / Actor / Sapphire Sleet

Sapphire Sleet

Nation: North Korea · 1 tracked threat(s) · Categories: MALWARE

Also known as: BlueNoroff, TA444, COPERNICIUM, Stardust Chollima, APT38 subcluster, CageyChameleon, CryptoCore

Tracked threats

Sapphire Sleet (DPRK/BlueNoroff) macOS Intrusion Campaign Targeting Cryptocurrency, Web3, and Venture Capital Sectors — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence