Threat Investigation
Request a demo
State-sponsored

Ruby Sleet

Ruby Sleet is classified as state-sponsored.

Origin
North Korea
Also known as
1

Ruby Sleet is a threat actor linked to North Korea's Ministry of State Security. Cerium has been involved in spear-phishing campaigns, compromising devices, and conducting cyberattacks alongside other North Korean threat actors. They have also targeted companies involved in COVID-19 research and vaccine development.

The group's reported origin is North Korea.

Also known as: CERIUM

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Ruby Sleet · Threat actors · Dark Radar