Cyber Threat Report: 'Onyx Sleet uses array of malware to gather intelligence for North Korea'

Following an indictment by the US Department of Justice linked to the intrusion set Microsoft track as Onyx Sleet, this report includes details of Onyx Sleet activity observed by Microsoft researchers. Microsoft first observed Onyx Sleet activity in 2014 and have seen the group target victims globally for espionage / intelligence gathering. More recently the report says that the group has pursued financial gain. The report outlines the extensive set of custom tools and malware used by the group and includes specific indicators of compromise (IoCs) and mitigation recommendations.