{
  "name": "Astrill VPN and DPRK Remote Worker Fraud",
  "slug": "astrill-vpn-and-dprk-remote-worker-fraud",
  "description": "Spur Engineering is releasing a comprehensive list of IP addresses associated with the Astrill VPN service to help companies protect against fraud and abuse from the Democratic Republic of Korea (DPRK) in the future.",
  "published": "2025-03-05T14:34:50+00:00",
  "created_at": "2025-03-05T14:34:50+00:00",
  "modified_at": "2025-03-05T15:23:56+00:00",
  "created_at_opencti": "2025-03-05T14:34:50+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2025-03-05",
    "astrill vpn",
    "dprk",
    "fraud",
    "infrastructure",
    "north korea",
    "vpn"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "96.9.249.242"
      },
      {
        "id": "",
        "name": "96.44.161.8"
      },
      {
        "id": "",
        "name": "96.44.161.43"
      },
      {
        "id": "",
        "name": "96.44.161.16"
      },
      {
        "id": "",
        "name": "95.216.14.148"
      },
      {
        "id": "",
        "name": "95.216.14.139"
      },
      {
        "id": "",
        "name": "95.216.14.138"
      },
      {
        "id": "",
        "name": "95.211.80.161"
      },
      {
        "id": "",
        "name": "95.211.80.165"
      },
      {
        "id": "",
        "name": "95.211.80.160"
      },
      {
        "id": "",
        "name": "95.143.193.152"
      },
      {
        "id": "",
        "name": "95.143.193.154"
      },
      {
        "id": "",
        "name": "95.143.193.150"
      },
      {
        "id": "",
        "name": "94.46.23.24"
      },
      {
        "id": "",
        "name": "94.46.23.25"
      },
      {
        "id": "",
        "name": "94.46.23.20"
      },
      {
        "id": "",
        "name": "91.239.130.102"
      },
      {
        "id": "",
        "name": "91.238.82.117"
      },
      {
        "id": "",
        "name": "91.238.82.116"
      },
      {
        "id": "",
        "name": "91.238.82.115"
      },
      {
        "id": "",
        "name": "91.219.237.210"
      },
      {
        "id": "",
        "name": "91.219.236.193"
      },
      {
        "id": "",
        "name": "91.207.206.82"
      },
      {
        "id": "",
        "name": "91.207.206.5"
      },
      {
        "id": "",
        "name": "91.207.206.4"
      },
      {
        "id": "",
        "name": "91.207.206.12"
      },
      {
        "id": "",
        "name": "91.207.206.10"
      },
      {
        "id": "",
        "name": "91.207.174.99"
      },
      {
        "id": "",
        "name": "91.207.174.102"
      },
      {
        "id": "",
        "name": "91.207.174.101"
      },
      {
        "id": "",
        "name": "91.201.66.149"
      },
      {
        "id": "",
        "name": "91.201.66.148"
      },
      {
        "id": "",
        "name": "91.201.66.146"
      },
      {
        "id": "",
        "name": "91.189.179.80"
      },
      {
        "id": "",
        "name": "91.189.176.18"
      },
      {
        "id": "",
        "name": "91.189.176.17"
      },
      {
        "id": "",
        "name": "89.252.132.200"
      },
      {
        "id": "",
        "name": "89.252.132.198"
      },
      {
        "id": "",
        "name": "89.252.132.197"
      },
      {
        "id": "",
        "name": "89.252.132.194"
      },
      {
        "id": "",
        "name": "89.187.161.220"
      },
      {
        "id": "",
        "name": "89.187.161.218"
      },
      {
        "id": "",
        "name": "89.187.161.213"
      },
      {
        "id": "",
        "name": "89.187.161.211"
      },
      {
        "id": "",
        "name": "89.187.161.180"
      },
      {
        "id": "",
        "name": "88.216.2.165"
      },
      {
        "id": "",
        "name": "88.216.2.164"
      },
      {
        "id": "",
        "name": "87.236.197.42"
      },
      {
        "id": "",
        "name": "87.236.197.43"
      },
      {
        "id": "",
        "name": "87.120.102.181"
      },
      {
        "id": "",
        "name": "85.206.168.254"
      },
      {
        "id": "",
        "name": "87.120.102.180"
      },
      {
        "id": "",
        "name": "85.206.168.232"
      },
      {
        "id": "",
        "name": "85.206.168.231"
      },
      {
        "id": "",
        "name": "85.206.168.230"
      },
      {
        "id": "",
        "name": "85.206.168.229"
      },
      {
        "id": "",
        "name": "85.206.163.196"
      },
      {
        "id": "",
        "name": "85.206.163.193"
      },
      {
        "id": "",
        "name": "85.206.163.192"
      },
      {
        "id": "",
        "name": "85.195.73.108"
      },
      {
        "id": "",
        "name": "85.195.73.107"
      },
      {
        "id": "",
        "name": "85.195.73.106"
      },
      {
        "id": "",
        "name": "85.195.72.66"
      },
      {
        "id": "",
        "name": "85.195.119.93"
      },
      {
        "id": "",
        "name": "85.195.119.92"
      },
      {
        "id": "",
        "name": "85.195.119.90"
      },
      {
        "id": "",
        "name": "84.17.41.94"
      },
      {
        "id": "",
        "name": "84.17.41.87"
      },
      {
        "id": "",
        "name": "84.17.41.88"
      },
      {
        "id": "",
        "name": "84.17.38.140"
      },
      {
        "id": "",
        "name": "84.17.38.135"
      },
      {
        "id": "",
        "name": "84.17.38.137"
      },
      {
        "id": "",
        "name": "84.17.38.134"
      },
      {
        "id": "",
        "name": "83.143.86.157"
      },
      {
        "id": "",
        "name": "83.143.86.151"
      },
      {
        "id": "",
        "name": "82.223.103.147"
      },
      {
        "id": "",
        "name": "82.103.131.229"
      },
      {
        "id": "",
        "name": "82.103.130.17"
      },
      {
        "id": "",
        "name": "82.103.129.80"
      },
      {
        "id": "",
        "name": "80.90.55.236"
      },
      {
        "id": "",
        "name": "80.90.55.234"
      },
      {
        "id": "",
        "name": "80.90.55.233"
      },
      {
        "id": "",
        "name": "80.90.48.191"
      },
      {
        "id": "",
        "name": "80.209.242.88"
      },
      {
        "id": "",
        "name": "80.209.242.93"
      },
      {
        "id": "",
        "name": "80.209.242.87"
      },
      {
        "id": "",
        "name": "80.209.242.84"
      },
      {
        "id": "",
        "name": "79.124.1.99"
      },
      {
        "id": "",
        "name": "79.124.1.98"
      },
      {
        "id": "",
        "name": "79.124.1.96"
      },
      {
        "id": "",
        "name": "79.124.1.97"
      },
      {
        "id": "",
        "name": "79.124.1.95"
      },
      {
        "id": "",
        "name": "79.124.1.94"
      },
      {
        "id": "",
        "name": "79.124.1.93"
      },
      {
        "id": "",
        "name": "79.124.1.92"
      },
      {
        "id": "",
        "name": "79.124.1.91"
      },
      {
        "id": "",
        "name": "79.124.1.90"
      },
      {
        "id": "",
        "name": "79.124.1.9"
      },
      {
        "id": "",
        "name": "79.124.1.89"
      },
      {
        "id": "",
        "name": "79.124.1.88"
      },
      {
        "id": "",
        "name": "79.124.1.87"
      },
      {
        "id": "",
        "name": "79.124.1.86"
      },
      {
        "id": "",
        "name": "79.124.1.85"
      },
      {
        "id": "",
        "name": "79.124.1.84"
      },
      {
        "id": "",
        "name": "79.124.1.83"
      },
      {
        "id": "",
        "name": "79.124.1.82"
      },
      {
        "id": "",
        "name": "79.124.1.81"
      },
      {
        "id": "",
        "name": "79.124.1.80"
      },
      {
        "id": "",
        "name": "79.124.1.8"
      },
      {
        "id": "",
        "name": "79.124.1.79"
      },
      {
        "id": "",
        "name": "79.124.1.78"
      },
      {
        "id": "",
        "name": "79.124.1.77"
      },
      {
        "id": "",
        "name": "79.124.1.76"
      },
      {
        "id": "",
        "name": "79.124.1.75"
      },
      {
        "id": "",
        "name": "79.124.1.74"
      },
      {
        "id": "",
        "name": "79.124.1.73"
      },
      {
        "id": "",
        "name": "79.124.1.72"
      },
      {
        "id": "",
        "name": "79.124.1.71"
      },
      {
        "id": "",
        "name": "79.124.1.70"
      },
      {
        "id": "",
        "name": "79.124.1.7"
      },
      {
        "id": "",
        "name": "79.124.1.69"
      },
      {
        "id": "",
        "name": "79.124.1.68"
      },
      {
        "id": "",
        "name": "79.124.1.66"
      },
      {
        "id": "",
        "name": "79.124.1.67"
      },
      {
        "id": "",
        "name": "79.124.1.65"
      },
      {
        "id": "",
        "name": "79.124.1.64"
      },
      {
        "id": "",
        "name": "79.124.1.63"
      },
      {
        "id": "",
        "name": "79.124.1.62"
      },
      {
        "id": "",
        "name": "79.124.1.61"
      },
      {
        "id": "",
        "name": "79.124.1.6"
      },
      {
        "id": "",
        "name": "79.124.1.60"
      },
      {
        "id": "",
        "name": "79.124.1.59"
      },
      {
        "id": "",
        "name": "79.124.1.58"
      },
      {
        "id": "",
        "name": "79.124.1.57"
      },
      {
        "id": "",
        "name": "79.124.1.56"
      },
      {
        "id": "",
        "name": "79.124.1.55"
      },
      {
        "id": "",
        "name": "79.124.1.54"
      },
      {
        "id": "",
        "name": "79.124.1.53"
      },
      {
        "id": "",
        "name": "79.124.1.52"
      },
      {
        "id": "",
        "name": "79.124.1.51"
      },
      {
        "id": "",
        "name": "79.124.1.50"
      },
      {
        "id": "",
        "name": "79.124.1.5"
      },
      {
        "id": "",
        "name": "79.124.1.48"
      },
      {
        "id": "",
        "name": "79.124.1.49"
      },
      {
        "id": "",
        "name": "79.124.1.47"
      },
      {
        "id": "",
        "name": "79.124.1.45"
      },
      {
        "id": "",
        "name": "79.124.1.46"
      },
      {
        "id": "",
        "name": "79.124.1.44"
      },
      {
        "id": "",
        "name": "79.124.1.43"
      },
      {
        "id": "",
        "name": "79.124.1.42"
      },
      {
        "id": "",
        "name": "79.124.1.41"
      },
      {
        "id": "",
        "name": "79.124.1.4"
      },
      {
        "id": "",
        "name": "79.124.1.40"
      },
      {
        "id": "",
        "name": "79.124.1.37"
      },
      {
        "id": "",
        "name": "79.124.1.39"
      },
      {
        "id": "",
        "name": "79.124.1.38"
      },
      {
        "id": "",
        "name": "79.124.1.36"
      },
      {
        "id": "",
        "name": "79.124.1.34"
      },
      {
        "id": "",
        "name": "79.124.1.35"
      },
      {
        "id": "",
        "name": "79.124.1.31"
      },
      {
        "id": "",
        "name": "79.124.1.32"
      },
      {
        "id": "",
        "name": "79.124.1.33"
      },
      {
        "id": "",
        "name": "79.124.1.30"
      },
      {
        "id": "",
        "name": "79.124.1.3"
      },
      {
        "id": "",
        "name": "79.124.1.29"
      },
      {
        "id": "",
        "name": "79.124.1.27"
      },
      {
        "id": "",
        "name": "79.124.1.28"
      },
      {
        "id": "",
        "name": "79.124.1.26"
      },
      {
        "id": "",
        "name": "79.124.1.254"
      },
      {
        "id": "",
        "name": "79.124.1.252"
      },
      {
        "id": "",
        "name": "79.124.1.253"
      },
      {
        "id": "",
        "name": "79.124.1.251"
      },
      {
        "id": "",
        "name": "79.124.1.25"
      },
      {
        "id": "",
        "name": "79.124.1.250"
      },
      {
        "id": "",
        "name": "79.124.1.249"
      },
      {
        "id": "",
        "name": "79.124.1.247"
      },
      {
        "id": "",
        "name": "79.124.1.248"
      },
      {
        "id": "",
        "name": "79.124.1.246"
      },
      {
        "id": "",
        "name": "79.124.1.244"
      },
      {
        "id": "",
        "name": "79.124.1.245"
      },
      {
        "id": "",
        "name": "79.124.1.242"
      },
      {
        "id": "",
        "name": "79.124.1.243"
      },
      {
        "id": "",
        "name": "79.124.1.241"
      },
      {
        "id": "",
        "name": "79.124.1.240"
      },
      {
        "id": "",
        "name": "79.124.1.24"
      },
      {
        "id": "",
        "name": "79.124.1.239"
      },
      {
        "id": "",
        "name": "79.124.1.238"
      },
      {
        "id": "",
        "name": "79.124.1.236"
      },
      {
        "id": "",
        "name": "79.124.1.237"
      },
      {
        "id": "",
        "name": "79.124.1.235"
      },
      {
        "id": "",
        "name": "79.124.1.234"
      },
      {
        "id": "",
        "name": "79.124.1.233"
      },
      {
        "id": "",
        "name": "79.124.1.232"
      },
      {
        "id": "",
        "name": "79.124.1.230"
      },
      {
        "id": "",
        "name": "79.124.1.231"
      },
      {
        "id": "",
        "name": "79.124.1.23"
      },
      {
        "id": "",
        "name": "79.124.1.229"
      },
      {
        "id": "",
        "name": "79.124.1.228"
      },
      {
        "id": "",
        "name": "79.124.1.227"
      },
      {
        "id": "",
        "name": "79.124.1.225"
      }
    ],
    "attack_patterns": [
      {
        "id": "ca53b2fa-42a8-45ec-9682-0cf54bf280f3",
        "name": "T1090"
      }
    ]
  },
  "external_refs": [
    "https://storage.googleapis.com/spur-astrill-vpn/ips.txt",
    "https://spur.us/astrill-vpn-and-remote-worker-fraud/",
    "https://otx.alienvault.com/pulse/67c86f1b08b6a1ffab6af3db"
  ]
}