TypeCampaignActors💡UNC2970Pub. dateMarch 9, 2023Initial accessImpactObserved techniquesAzure AD abuseIntune abuseReferenceshttps://www.mandiant.com/resources/blog/lightshow-north-korea-unc2970https://www.mandiant.com/resources/blog/lightshift-and-lightshowStatusStubLast editedJun 2, 2024 8:02 AM