Payload URLs

67 payload URLs reported in published sources on North Korean (DPRK) cyber operations, ordered by value. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
http://chainlink-api-v3.cloud/api/service/token/3ae1d04a7c1a35b9edf045a7d131c4a7 IT Worker FraudContagious Interview 1
http://chainlink-api-v3.cloud/api/service/token/792a2e10b9eaf9f0a73a71916e4269bc IT Worker FraudContagious Interview 1
http://chainlink-api-v3.com/api/service/token/1a049de15ad9d038a35f0e8b162dff76 IT Worker FraudContagious Interview 1
http://chainlink-api-v3.com/api/service/token/7d6c3b0f7d1f3ae96e1d116cbeff2875 IT Worker FraudContagious Interview 1
http://chainlink-api-v3.com/api/service/token/b2040f01294c183945fdbe487022cf8e IT Worker FraudContagious Interview 1
http://openmodules.org/api/service/token/f90ec1a7066e8a5d0218c405ba68c58c IT Worker FraudContagious Interview 1
http://sfrclak.com:8000/6202033 Contagious Interview 1
http://w3capi.marketing/api/v2/node/d6a8d0d14d3fbb3d5e66c8b007b7a2eb IT Worker FraudContagious Interview 1
https://api.mocki.io/v2/8sg8bhsv/tracks/errors/665232 IT Worker FraudContagious Interview 1
https://api.npoint.io/159a15993f79c22e8ff6 IT Worker FraudContagious Interview 1
https://api.npoint.io/1f901a22daea7694face Contagious Interview 1
https://api.npoint.io/24c25d5f5fcbb0992a4f Contagious Interview 1
https://api.npoint.io/33e8d008c334b060adad Contagious Interview 1
https://api.npoint.io/62755a9b33836b5a6c28 IT Worker FraudContagious Interview 1
https://api.npoint.io/641d37178a880b1e8b8f Contagious Interview 1
https://api.npoint.io/96979650f5739bcbaebb Contagious Interview 1
https://api.npoint.io/9d94ec6053e75dbd933e Contagious Interview 1
https://api.npoint.io/b1f111907933b88418e4 IT Worker FraudContagious Interview 1
https://api.npoint.io/b68a5c259541ec53bb5d IT Worker FraudContagious Interview 1
https://api.npoint.io/b964566497d98298d32c Contagious Interview 1
https://api.npoint.io/c82d987dd2a0fb62e87f IT Worker FraudContagious Interview 1
https://api.npoint.io/d1ef256fc2ad6213726e IT Worker FraudContagious Interview 1
https://api.npoint.io/d4dfbbac8d7c44470beb IT Worker FraudContagious Interview 1
https://api.npoint.io/e5a5e32cdf9bfe7d2386 Contagious Interview 1
https://api.npoint.io/e6a6bfb97a294115677d IT Worker FraudContagious Interview 1
https://api.npoint.io/f4be0f7713a6fcdaac8b IT Worker FraudContagious Interview 1
https://api.npoint.io/f96fb4e8596bf650539c IT Worker FraudContagious Interview 1
https://ausbildungsbuddy.de/modules/mod_mail/inc/get.php?ra=iew&zw=lk0100 Konni 1
https://ausbildungsbuddy.de/modules/mod_mail/src/upload.php Konni 1
https://cldownloader.github.io/logo.png DPRK (cluster unattributed) 1
https://gitlab.com/rabbit779/giraff88 DPRK (cluster unattributed) 1
https://gitlab.com/rabbit779/giraff88/-/raw/main/first.ini?ref_type=heads DPRK (cluster unattributed) 1
https://gitlab.com/rabbit779/giraff88/-/raw/main/help.ini?ref_type=heads DPRK (cluster unattributed) 1
https://gitlab.com/rabbit779/giraff88/-/raw/main/us8i.pdf?ref_type=heads DPRK (cluster unattributed) 1
https://jsonkeeper.com/b/4NAKK IT Worker FraudContagious InterviewDPRK (cluster unattributed) 3
https://jsonkeeper.com/b/8RLOV IT Worker FraudContagious Interview 1
https://jsonkeeper.com/b/BADC6 Contagious Interview 1
https://jsonkeeper.com/b/CNMYL IT Worker FraudContagious Interview 1
https://jsonkeeper.com/b/DMVPT IT Worker FraudContagious Interview 1
https://jsonkeeper.com/b/E4YPZ IT Worker FraudContagious Interview 1
https://jsonkeeper.com/b/E7GKK IT Worker FraudContagious Interview 1
https://jsonkeeper.com/b/FM8D6 IT Worker FraudContagious Interview 2
https://jsonkeeper.com/b/GCGEX Contagious Interview 1
https://jsonkeeper.com/b/GLGT4 IT Worker FraudContagious Interview 1
https://jsonkeeper.com/b/GNOX4 Contagious Interview 1
https://jsonkeeper.com/b/IARGW Contagious Interview 1
https://jsonkeeper.com/b/L4T7Y IT Worker FraudContagious Interview 1
https://jsonkeeper.com/b/PCDZO IT Worker FraudContagious Interview 1
https://jsonkeeper.com/b/PQPTZ IT Worker FraudContagious Interview 1
https://jsonkeeper.com/b/UPCMV Contagious Interview 1
https://jsonkeeper.com/b/WCXNT IT Worker FraudContagious Interview 1
https://jsonkeeper.com/b/XRGF3 IT Worker FraudContagious InterviewDPRK (cluster unattributed) 2
https://jsonkeeper.com/b/XV3WO IT Worker FraudContagious Interview 1
https://jsonkeeper.com/b/YY8VI Contagious InterviewLazarus Group 1
https://maskasd.com/8555575039 APT38 1
https://mocki.io/v1/32f16c80-602a-4c80-80af-32a9b8220a6b Contagious InterviewLazarus Group 1
https://pastebin.com/0ec7i68M Contagious Interview 1
https://pastebin.com/1s0WPk2y Lazarus Group 1
https://pastebin.com/BdyXWfgv Lazarus Group 1
https://pastebin.com/CJ5PrtNk Contagious Interview 1
https://pastebin.com/DjDCxcsT Contagious Interview 1
https://pastebin.com/raw/3yptBDhL APT38 1
https://pastebin.com/u/CrackEden1251_WaitsRenee9809 Contagious Interview 1
https://pastebin.com/u/KerrWhale2274_KnowNtsc6785 Contagious Interview 1
https://pastebin.com/UV9pJN2M DPRK (cluster unattributed) 1
https://teams.onweblive.org/api/update/8555575039/4 APT38 1
https://www.jsonkeeper.com/b/QJZCG Contagious Interview 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.