Sapphire Sleet Targets macOS

Reported 29 May 2026 by otx · Severity: medium

We recently observed a multi-stage macOS intrusion campaign conducted by the North Korean state-sponsored threat group Sapphire Sleet (also tracked as BlueNoroff / UNC1069). The campaign specifically targets macOS environments within high-value financial sectors, including ventur