North Korean "Moonstone Sleet" Targets South Koreans via Malicious Game

In January 2024, Microsoft identified a new North Korean threat group, Moonstone Sleet, which used a unique "trust-building" tactic. They created a functional but malicious blockchain-based game called "DeTankWar" and contacted targets in South Korea via LinkedIn and email to "collaborate." Once downloaded, the game installed YouieLoad malware to exfiltrate browser data and network credentials.