Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors

North Korean threat actor Jade Sleet has been linked to the compromise of a small India-based IT services organization. The attack involved the deployment of two backdoors named FLATROOF and ROOFDECK. SentinelOne disclosed the activity and attributed it to Jade Sleet. The adversary continues its pattern of targeting developers to gain access to broader networks. The attack reportedly involved Apple-related tooling or lures, though the full content was truncated. This incident highlights the ongoing supply chain and IT services targeting by North Korean APT groups. The breach underscores the risk posed to smaller IT firms that may serve as stepping stones to larger targets.