Malicious repositories
153 malicious repositories reported in published sources on North Korean (DPRK) cyber operations, ordered by value. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.
| Value | Campaign | Filed under | Sources |
|---|---|---|---|
0glabs-solid/0g-play |
Contagious Interview | 1 | |
0GPlayworks/MetaPlay |
Contagious Interview | 1 | |
0GXPlay/MetaPlay |
Contagious Interview | 1 | |
0xbrentfi/StockX_PoC_1.03 |
Contagious Interview | 1 | |
a5-dir/CoinRoll |
Contagious Interview | 1 | |
a5labs-git/Coin-Roll |
Contagious Interview | 1 | |
a5labs-hubs/CoinRoll |
Contagious Interview | 1 | |
a5labsgit/AmonixPlay |
Contagious Interview | 1 | |
adexplore/Kusto.Explorer |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
adkcore/Windows-ADK |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
AetSoftNesus/AetSoftSolution |
Contagious Interview | 1 | |
Altrix-Demo-Repo/Altrix |
Contagious Interview | 1 | |
Altura-Hub111/Altura-MVP |
Contagious Interview | 1 | |
aokisasakidev/mit-license-pkg |
Contagious Interview | 1 | |
applck/AppLocker |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
aronhirotobz-ops/GB-VPS |
Contagious Interview | 1 | |
arsagajp/JP-Soccer |
Contagious Interview | 1 | |
arsagapartner/JP-Soccer |
Contagious Interview | 1 | |
ArsaPro001/jp-soc07 |
Contagious Interview | 1 | |
astrabytesyncshub2019/.github |
Contagious Interview | 1 | |
astrabytesyncshub2019/sub-web3-social-platform |
Contagious Interview | 1 | |
astrasbytesyncs/rocko |
Contagious Interview | 1 | |
astrasbytesyncs/web3-social-platform |
Contagious Interview | 1 | |
autify5/Autologon |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
autonomys-nexus/Autonomys |
Contagious Interview | 1 | |
azpath/AzCopy |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
bartuser/BarTender |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
BChain-Cap/SocialFi-v1 |
Contagious Interview | 1 | |
bestselection18/Automation-bot |
IT Worker Fraud | Ketman | 1 |
Betfin-mvp/poker |
Contagious Interview | 1 | |
Betfin-mvp/poker-v2 |
Contagious Interview | 1 | |
Betfin-mvp/poker-v3 |
Contagious Interview | 1 | |
beycmp/Beyond-Compare |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
bitbucket.org/coinbase2024/voting-dapp |
Contagious Interview | 1 | |
bitbucket.org/notion-dex/ultrax |
Contagious Interview | 1 | |
bitbucket.org/welcome-air/welcome-nest |
Contagious Interview | 1 | |
bitbucket.org/zoro-workspace |
Contagious Interview | 1 | |
Blockdaemon-Hub0022/World-Travel |
Contagious Interview | 1 | |
bloxberg-D/Jackpot |
Contagious Interview | 1 | |
borismelnik1982-netizen/governance-staking-build |
Contagious Interview | 1 | |
bvclient/Bitvise-SSH-Client |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
corelaun/Autoruns |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
cpumon/Process-Monitor |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
damekit/Dameware |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
DapperlabsMD/Dapperlabs-MVP |
Contagious Interview | 1 | |
dbgrix/DebugView |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
delprof2int/Delprof2 |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
desklt/LEAP-Desktop |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
enssm/NSSM |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
EverDreamSoftSolution/EverPlayMVP |
Contagious Interview | 1 | |
fsgrid/FSLogix |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
gitlab.com/predict-together/forge-4626-invariants |
DPRK (cluster unattributed) | 1 | |
gitlab.com/pulsynk-org/rekt-db |
DPRK (cluster unattributed) | 1 | |
gitlab.com/trixauvex-org/x402-kit |
DPRK (cluster unattributed) | 1 | |
glyph3/ScreenConnect-Client |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
golangorg/formstash |
Contagious Interview | 1 | |
Holitix-studio/Holitix-mvp |
Contagious Interview | 1 | |
Holitix-tech/Holitix-mvp |
Contagious Interview | 1 | |
iiscfg/IIS-Crypto |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
Improbable-Hub/World-Dream |
Contagious Interview | 1 | |
kdiffmg/KDiff3 |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
lapwiz/Windows-LAPS |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
Lukso-Tech-Hub5/Lukso-Platform |
Contagious Interview | 1 | |
michalcaladanxyz/caladanecomvp |
Contagious Interview | 1 | |
migrtool/PCmover |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
mireles343/forge-4626-invariants |
DPRK (cluster unattributed) | 1 | |
ngjuj88-design/aimarket |
Contagious Interview | 1 | |
ngjuj88-design/mplay |
Contagious Interview | 1 | |
ngjuj88-design/ritualgame |
Contagious Interview | 1 | |
omskiwdcvoiuyfd0998/0ijnbjfke8djfefhkehhdkefkeu90djfkefh |
Konni | 1 | |
omskiwdcvoiuyfd0998/media |
Konni | 1 | |
omskiwdcvoiuyfd0998/medianews |
Konni | 1 | |
omskiwdcvoiuyfd0998/zoominstaller |
Konni | 1 | |
orgastrabytesync/sub-web3-social-platform |
Contagious Interview | 1 | |
oxyaorigin-hub2000/EverPlay_MVP_1.8 |
Contagious Interview | 1 | |
paperdesk/PaperPort |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
PedrinPY/rekt-db |
DPRK (cluster unattributed) | 1 | |
procbyte/ProcDump |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
prtgmon/PRTG-Network-Monitor |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
psanvil/PsTools |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
psexsrv/PsExec |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
Pulsynk/pulsynk |
DPRK (cluster unattributed) | 1 | |
pwmover/Profwiz |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
pxmon/Process-Explorer |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
Qevoratrix-live-coding/react |
Contagious Interview | 1 | |
reqdbg/HTTP-Debugger |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
ritualai-hub/AI-Mesh |
Contagious Interview | 1 | |
ritualaihub/AI-Mesh |
Contagious Interview | 1 | |
ritualgroup/ZetaPlay |
Contagious Interview | 1 | |
ritualzhub/ZetaPlay |
Contagious Interview | 1 | |
rkama411/x402-kit |
DPRK (cluster unattributed) | 1 | |
RominaMabelRamirez/dify |
Contagious Interview | 1 | |
RominaMabelRamirez/hflix |
Contagious Interview | 1 | |
rsamod/RSAT |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
safcli/Safenet-Authentication-Client |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
skyjum/x402-kit |
DPRK (cluster unattributed) | 1 | |
SonataM/arky |
IT Worker Fraud | 1 | |
SonataM/brics |
IT Worker Fraud | 1 | |
SonataM/cr900 |
IT Worker Fraud | 1 | |
SonataM/decoy |
IT Worker Fraud | 1 | |
SonataM/Liquina |
IT Worker Fraud | 1 | |
SonataM/louie |
IT Worker Fraud | 1 | |
SonataM/Moocat |
IT Worker Fraud | 1 | |
SonataM/orken |
IT Worker Fraud | 1 | |
SonataM/peku |
IT Worker Fraud | 1 | |
SonataM/trumpshair |
IT Worker Fraud | 1 | |
SonataM/trumpx |
IT Worker Fraud | 1 | |
SonataM/ufobirddog |
IT Worker Fraud | 1 | |
SonataM/vodcat |
IT Worker Fraud | 1 | |
spherityworkspace18/Metaforge-Platform |
Contagious Interview | 1 | |
sputmgr/SuperPuTTY |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
sr-werney/forge-4626-invariants |
DPRK (cluster unattributed) | 1 | |
sshcrt/SecureCRT |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
stardev0914/agent.snoopybnb.wtf |
Contagious Interview | 1 | |
stardev0914/aptober |
Contagious Interview | 1 | |
stardev0914/bestwallet |
Contagious Interview | 1 | |
stardev0914/captainpepe |
Contagious Interview | 1 | |
stardev0914/claim.snoopybnb.wtf |
Contagious Interview | 1 | |
stardev0914/dexproject |
Contagious Interview | 1 | |
stardev0914/etherchainai |
Contagious Interview | 1 | |
stardev0914/futuresyncx |
Contagious Interview | 1 | |
stardev0914/laifubnb |
Contagious Interview | 1 | |
stardev0914/pepeheimer |
Contagious Interview | 1 | |
stardev0914/protocolai |
Contagious Interview | 1 | |
stardev0914/safutoken |
Contagious Interview | 1 | |
stardev0914/snoopybnb.wtf |
Contagious Interview | 1 | |
stardev0914/snortertoken |
Contagious Interview | 1 | |
stardev0914/spurdomeme |
Contagious Interview | 1 | |
stardev0914/stakesnoopy.wtf |
Contagious Interview | 1 | |
stardev0914/tailwind-magic |
Contagious Interview | 1 | |
stardev0914/tetrismic |
Contagious Interview | 1 | |
stockx-fi/stockx_v1 |
Contagious Interview | 1 | |
Stomp47/rekt-db |
DPRK (cluster unattributed) | 1 | |
symdbg/WinDbg |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
syshield/Sysmon |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
sysramap/RAMMap |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
TarsAI-com/AgentMesh |
Contagious Interview | 1 | |
TarsAI-net/AgentMesh |
Contagious Interview | 1 | |
tarsai-pro/Agent-Mesh |
Contagious Interview | 1 | |
tcpvmon/TCPView |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
teracli/Tera-Term |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
togetherlabsinchub/palooza |
Contagious Interview | 1 | |
Trickgs-Hub/Trickgs-MVP |
Contagious Interview | 1 | |
Trixauvex-org/trixauvex |
DPRK (cluster unattributed) | 1 | |
velachainhub/nft-ecommerce |
Contagious Interview | 1 | |
vhdcore/Disk2vhd |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
vmlets/VMware-Tools |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
wayout4u/rekt-db |
DPRK (cluster unattributed) | 1 | |
winlabel/BgInfo |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
xaya244/XayaPlay_MVP_1.2 |
Contagious Interview | 1 | |
xferwiz/Transwiz |
EtherHiding / UNC5342DPRK (cluster unattributed) | 2 | |
zerog-ai/MGVerse |
Contagious Interview | 1 | |
ziobiri/forge-4626-invariants |
DPRK (cluster unattributed) | 1 |