Storm-2139, also known as Moonstone Sleet, is a North Korean state-aligned threat actor that emerged from initial overlaps with other DPRK groups like Diamond Sleet but has since developed its own distinct infrastructure and tactics. This group's primary motivations include cyberespionage to steal intellectual property and sensitive data, as well as financial gain through ransomware deployments and other revenue-generating schemes such as fake companies and IT worker placements. It primarily targets organizations in the software and information technology sectors, education, aerospace, defense industrial base, and related industries like drone and aircraft manufacturing.