Citrine Sleet — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
May 26, 2026
Last Seen
June 8, 2026

Citrine Sleet is a apt_group tracked across 3 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed May 26, 2026; most recent activity June 8, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • Don't Fear the Repo: UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency — Proofpoint · June 8, 2026
  • Radiant Capital Winds Down to a $2M Husk, 20 Months After DPRK-Linked $50M Heist — Thedefiant · June 1, 2026
  • SOC Prime: Detect Lazarus Attacks Using Three New RATs — socprime.com · May 26, 2026
  • Lazarus Group Targets Financial and Crypto Firms with RemotePE Memory — Rescana · May 26, 2026

CVSS v3.1 Breakdown