Threat Intelligence / Actor / UNC1069 / Sapphire Sleet

UNC1069 / Sapphire Sleet

Nation: North Korea · 1 tracked threat(s) · Categories: SUPPLY_CHAIN

Also known as: Sapphire Sleet, BlueNoroff, CryptoCore, CageyChameleon, Alluring Pisces, APT38, Black Alicanto, Copernicium, Nickel Gladstone, Stardust Chollima, TA444, BeagleBoyz

Tracked threats

Axios npm Supply Chain Compromise — WAVESHAPER.V2 Cross-Platform RAT Deployment by UNC1069/Sapphire Sleet (DPRK) — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence