Pearl Sleet is a North Korea-based nation-state activity group, active since at least 2012, primarily motivated by cyber espionage and intelligence collection. The group demonstrates stealth and persistence, employing custom malware and deceptive tactics to maintain high operational security and extended presence within targeted networks. Pearl Sleet distinguishes itself by consistently targeting South Korean entities engaged with North Korean defectors and human rights activists, as well as media organizations. The group is also tracked under the aliases DEV-0215 and LAWRENCIUM.