Agentic Cyber Explorerby Fide AI · PreviewPreview
Organizations/threat actor

Onyx Sleet

Microsoft designation for a North Korean threat actor it reports using ARTEX from late October 2026.

1 records1 attack
Oct 29, 2026
Microsoft reports North Korean actors Onyx Sleet and Pearl Sleet adopted ARTEX in human-directed operations
AttackMisuse reportMicrosoft, Onyx Sleet, Pearl Sleet

Microsoft Threat Intelligence reports that Onyx Sleet and Pearl Sleet used ARTEX in operations from late October 2026. Its broader assessment describes North Korean actors using AI to accelerate established targeting, social engineering and tooling workflows, while explicitly judging the operations human-directed rather than fully autonomous.