Ruby Sleet is a threat actor linked to North Korea's Ministry of State Security. Cerium has been involved in spear-phishing campaigns, compromising de...

Threat Actor Profile

Ruby Sleet

State-sponsored threat group originating from KP.

Real-Time Alerts

Actor Overview

Origin Country
KP

Related Threat Reports

Premium
APT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated

Get alerts when new intel on Ruby Sleet is published.

Actor Details

Primary Name
Ruby Sleet
Known Aliases
CERIUM
Data Source
Precursor Intelligence
Need API Access?

Integrate threat actor data into your SIEM or SOAR.

View Plans →