Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
By [email protected] (The Hacker News)
AI Summary
SentinelOne attributed North Korean threat actor Jade Sleet to the compromise of an India-based IT services provider using two previously undocumented backdoors — FLATROOF and ROOFDECK — delivered via Apple-ecosystem attack vectors, consistent with the group's history of targeting developers as an entry point into downstream networks. The targeting of small IT service providers as a supply chain vector reflects a deliberate DPRK strategy to reach higher-value targets through trusted third parties. Security teams at IT service providers should scrutinize macOS endpoint security and developer workstation protections.
Relevance score: 85.0/100
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →