Analysis of North Korean Hackers’ Targeted Phishing Scams on Telegram [Monday, December 11, 2023]

Analysis of North Korean Hackers’ Targeted Phishing Scams on Telegram [Monday, December 11, 2023]
Report

Analysis of North Korean Hackers’ Targeted Phishing Scams on Telegram

Description :
North Korean hacker group Lazarus initiated a widespread phishing operation on Telegram, specifically targeting the cryptocurrency industry. More recently, these hackers have escalated their tactics by posing as reputable investment institutions to execute phishing scams against various cryptocurrency project teams.

Published Created Modified
2023-12-11 16:50:10 2023-12-11 16:50:10 2023-12-11 17:14:47

Indicators

IPv4s :
  • 104.168.137.21
Domains :
  • emv1.ubi-safemeeting.live
  • archax.team-meeting.xyz
  • ihsgpnsj.meetingverse.app
  • gumi-cryptos.team-meeting.xyz
  • hashkey.team-meet.online
  • hashkey.internal-meeting.online
  • hwsrv-1093408.hostwindsdns.com
  • emv1.group-meeting.team
  • archax.privymeet.com
  • help.video-meet.team
  • email.alwayswait.online
  • internal-meeting.online
  • hashkey.video-meet.team
  • drop.skyboxdrive.cloud
  • hashkey.group-meeting.online
  • emv1.team-meet.xyz
  • bitfinex.video-meet.online
  • cryptowave.video-meet.online
  • gumi-cryptos.group-meeting.online
  • archax.skyboxdrive.cloud
  • hashkey.online-meeting.team
  • archax.team-meeting.pro
  • hashkey.video-meet.online
  • bitfinex.internal-meeting.online
  • cryptowave.internal-meeting.online
  • d1.skyboxdrive.cloud
  • hashkey.team-meeting.xyz
  • gumi-cryptos.group-meeting.team
  • archax.videomeethub.online
  • hashkey.group-meeting.team
  • gumi-cryptos.team-meet.online
  • hashkey.video-meeting.team
  • dun.auditprovidre.online
  • archax.trustmeeting.live
  • gumi-cryptos.video-meet.team

External References

You can download the txt file containing the indicators by clicking on the button below:

About the author
Julien B.

Securitricks

Up-to-Date Cybersecurity Insights & Malware Reports

Securitricks

Great! You’ve successfully signed up.

Welcome back! You've successfully signed in.

You've successfully subscribed to Securitricks.

Success! Check your email for magic link to sign-in.

Success! Your billing info has been updated.

Your billing was not updated.