Microsoft SignalHow a North Korean threat actor succeeded by tricking users
Microsoft Threat Intelligence uncovered a cyber campaign by the North Korean threat actor Sapphire Sleet that relies on social engineering rather than software vulnerabilities. Cyber attackers pretending to be a legitimate software update tricked users into manually running malicious files that allowed them to steal passwords, cryptocurrency assets and personal data – all while avoiding built-in security checks. Read the full analysis for more on how it happened and tech companies worked together to solve it.































