`nvidiasdk.fly.dev`

nvidiasdk.fly.dev is a domain that 2 published sources report in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from GitLab Threat Intelligence and Break Glass Intelligence. The earliest of those reports is dated 2025-09-17 and the most recent 2026-04-01.

domain Contagious Interview CURATED

First seen 2025-09-17 · last seen 2026-04-01

Sources

Backend service behind the fake recruiting site in the September 2025 BeaverTail distribution chain GitLab Threat Intelligence documented, masquerading as an NVIDIA SDK host.
Tech Note - BeaverTail variant distributed via malicious repositories and ClickFix lure — GitLab Threat Intelligence · published 2025-09-17 · pulled 2026-09-21
…IOC Type Description businesshire.top Domain Domain used to host fake recruiting site containing ClickFix commands nvidiasdk.fly.dev Domain Backend service and malware staging for businesshire.top 172.86.93.139 IP Command and Control address for BeaverTail and…
Tech Note - BeaverTail variant distributed via malicious repositories and ClickFix lure - GitLab Security Tech Notes — GitLab Threat Intelligence · under “Infrastructure” · published 2025-09-17 · pulled 2026-09-10
…nvidiasdk.fly.dev Payload Staging: https://raw.githubusercontent.com/RominaMabelRamirez/dify/refs/heads/bai/api/* (deleted) https://nvidiasdk.fly.dev/nvs User-Agent Campaign Markers: 205 , 206 , 207 , 209 (numeric-only User-Agent strings) Malware Samples (SHA256) Hash…
Two IOCs In, Five C2 Servers Out: Mapping DPRK's Contagious Interview Campaign From InvisibleFerret to a Kimsuky Crossover - Breakglass Intelligence — Breakglass Intelligence — Break Glass Intelligence · under “Network IOCs” · published 2026-04-01 · pulled 2026-09-10

Find this indicator in the index, or see every domain this site holds under Domains in the browse listing.

Related indicators

Cited by the same report: Tech Note - BeaverTail variant distributed via malicious repositories and ClickFix lure

GitLab Threat Intelligence lists 36 other indicators in this source. 7 are shown, chosen across types.

All 37 indicators from this source

Cited by the same report: Two IOCs In, Five C2 Servers Out: Mapping DPRK's Contagious Interview Campaign From InvisibleFerret to a Kimsuky Crossover - Breakglass Intelligence — Breakglass Intelligence

Break Glass Intelligence lists 9 other indicators in this source. 5 are shown, chosen across types.

All 10 indicators from this source