Tactics, Techniques & Procedures (TTPs): Utilizes supply chain attacks, focusing on software dependencies and open-source packages.
Sapphire Sleet, also known as BlueNoroff, is a North Korean hacking group known for its sophisticated cyber operations targeting financial and technology sectors. Their recent activities have included supply chain attacks, particularly against npm packages, which have raised concerns about the security of open-source software ecosystems. The group's tactics often involve exploiting vulnerabilities in third-party libraries to gain access to sensitive data and systems.Adversary Intelligence Dossier: Sapphire Sleet
Tactical analysis and behavioral tracking for Sapphire Sleet (North Korea).
Primary Sourcing Telemetry: Synthesized from The CyberSec Times Intelligence Bureau under Transformative Fair Use for defensive security awareness.
Explore the Complete Broadsheet Edition
This briefing is part of the 4-page daily intelligence broadsheet published on 2026-06-21.