Moonstone Sleet
Moonstone Sleet is a North Korea-attributed cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 10 sectors, including Government and Technology, in 14 countries, including the United States and the United Kingdom. It uses 46 MITRE ATT&CK techniques and exploits 1 known CVE.
- Storm-1789
- Stressed Pungsan
- Origin
- North Korea
- Techniques
- 46
- Exploited CVEs
- 1
- First seen
- Jan 1, 2023
- Last seen
- Mar 6, 2025
- Record updated
Who They Target.
About Moonstone Sleet.
Moonstone Sleet is a North Korean-linked threat actor executing both financially motivated attacks and espionage operations. The group previously overlapped significantly with another North Korean-linked entity, Lazarus Group, but has differentiated its tradecraft since 2023.
Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.