`ms-offices.com`

ms-offices.com is a domain that one published source reports in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Google. The report is dated 2022-12-07.

domain APT37 MATCHED IN SOURCE

First seen 2022-12-07 · last seen 2022-12-07

Registration

Registered	2025-03-23
Registrar	Squarespace Domains LLC
Expires	2028-03-23
Last changed	2025-03-23
Status	client delete prohibited, client transfer prohibited

From the registry’s RDAP record for ms-offices.com, looked up 2026-10-05.

Source

…C2: word-template.net openxmlformat.org ms-office.services ms-offices.com template-openxml.com Posted in: Threat Analysis Group…
Internet Explorer 0-day exploited by North Korean actor APT37 — Google · under “Conclusions” · published 2022-12-07 · pulled 2026-09-12

Find this indicator in the index, or see every domain this site holds under Domains in the browse listing.

Related indicators

Cited by the same report: Internet Explorer 0-day exploited by North Korean actor APT37

Google lists 4 other indicators in this source.