216.73.217.22

Indicator (IOC)

stix Revoked AlienVault · Published 21/12/2025 06:09 · Modified 21/12/2025 08:07

Essential information

Value / Name
americajobmail.site
Confidence
100/100
Revoked
Yes
Valid from
30/10/2024 17:32
Valid until
26/08/2025 18:32
Pattern type
stix
Published
21/12/2025 06:09
Modified
21/12/2025 08:07
Author / Source
AlienVault

Description

No description.

Pattern

[domain-name:value = 'americajobmail.site']

Labels / Tags

Labels: cve-2021-44228 cve-2023-27350 cve-2023-42793 dtrack espionage fiddling scorpius initial access broker korean people's army lighthand mimikatz north korea play play ransomware reconnaissance general bureau sliver smalltiger tigerrat validalpha

Marking (TLP)

TLP:CLEAR

Related entities

Reports and intrusion sets linked to this IOC.

Intrusion sets (2)

  • Andariel Silent ChollimaPLUTONIUM
    The MITRE Corporation Confidence 100

    [Andariel](https://attack.mitre.org/groups/G0138) is a North Korean state-sponsored threat group that has been active since at least 2009. [Andariel](https://attack.mitre.org/groups/G0138) has primarily focused its operations--which have included destructive attacks--against South Korean …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 27/03/2026 01:13
  • Jumpy Pisces
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 Published 21/12/2025 08:07 · Modified 21/12/2025 08:07