[threat-actors] Add Pearl Sleet

2024-02-01 11:01:56 -08:00 · 2024-02-01 11:01:56 -08:00 · 4cec7a7322
parent f1d514afc4
commit 4cec7a7322
1 changed files with 15 additions and 0 deletions
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@ -14187,6 +14187,21 @@
      },
      "uuid": "a4004712-f74b-4c8c-b1fb-bb7229bc2da1",
      "value": "Cuboid Sandstorm"
+    },
+    {
+      "description": "Pearl Sleet is a nation state activity group based in North Korea that has been active since at least 2012. They primarily target defectors from North Korea, media organizations in carrying out their cyber espionage activities.",
+      "meta": {
+        "country": "KP",
+        "refs": [
+          "https://techcommunity.microsoft.com/t5/microsoft-defender-xdr-blog/monthly-news-december-2023/ba-p/3998431"
+        ],
+        "synonyms": [
+          "DEV-0215",
+          "LAWRENCIUM"
+        ]
+      },
+      "uuid": "ef0d776a-51de-4965-ba1c-69ed256e0e5d",
+      "value": "Pearl Sleet"
    }
  ],
  "version": 298