Jade Sleet Attribution in Indian IT Provider Breach Using FLATROOF and ROOFDECK Backdoors

Jade Sleet, a North Korean threat actor, compromised an Indian IT provider through social engineering and supply chain attacks using FLATROOF and ROOFDECK macOS backdoors. The campaign leveraged weaponized Terraform dependencies and targeted DevOps engineers to deploy Rust-based malware for data exfiltration and system control.

The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information technology (IT) services industry, once again highlighting how the adversary continues to target developers to breach target networks.

Cybersecurity company SentinelOne, which disclosed details of the activity, said it involved the use of Apple

Read original article