Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors

As cited

Copy frozen at 2026-09-21 08:50 UTC (site build).

threat intel

Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors

Jade Sleet, a North Korean threat actor, compromised an India-based IT services provider using FLATROOF and ROOFDECK backdoors. The attack highlights the group's continued strategy of targeting developers and IT providers to gain access to downstream networks.

Why it matters: IT services providers and their customers face supply chain risk from nation-state actors leveraging smaller vendors as pivot points; practitioners should review access logs and monitor for FLATROOF and ROOFDECK indicators if this provider supports your organization.

Source published

2026-09-21 06:06 UTC

First seen by Cybersecurity Tracker

2026-09-21 07:48 UTC