Diamond Sleet is an advanced persistent threat (APT) that was discovered in 2018 by cybersecurity researchers at Kaspersky Lab. It targets government agencies, military organizations and defense contractors in the United States, Europe, Asia, Africa, South America, Australia, and Oceania. The group behind Diamond Sleet is believed to be a state-sponsored actor with ties to Russia or China. They are known for their sophisticated techniques such as spear phishing emails, malware injections, and social engineering tactics. Their ultimate goal is to steal sensitive information from targeted organizations that could potentially harm national security interests of the affected countries.
Techniques, tactics and practices:
Diamond Sleet is a highly sophisticated threat actor that uses various techniques to compromise their targets. Some of these include spear phishing emails, malware injections through vulnerable software or outdated systems, and social engineering tactics such as impersonating legitimate organizations or individuals. They also use advanced tools like rootkits, which allow them to hide their presence on a system for extended periods of time. Additionally, they are known to conduct extensive reconnaissance activities before launching an attack, gathering information about the target organization\'s network and security measures in order to better plan their attacks.