`apachelicense.vercel.app`

apachelicense.vercel.app is a domain that 2 published sources report in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Socket and Anonhaven. The earliest of those reports is dated 2026-04-07 and the most recent 2026-04-08.

domain Contagious Interview CURATED

First seen 2026-04-07 · last seen 2026-04-08

Sources

Command-and-control or payload-staging host for the April 2026 cross-ecosystem Contagious Interview wave, reported by Socket.
North Korea's Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads — Socket · published 2026-04-07 · pulled 2026-09-21
…hidden in apachelicense/core.py ’s find_by_key() function, which hands execution to a staged loader in custom_util.py that contacts apachelicense.vercel.app , retrieves a downloadUrl , downloads ecw_update.zip , and launches platform-specific payloads.…
North Korea’s Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads | Socket — Socket · under “Hiding Malware Behind Routine APIs #” · published 2026-04-07 · pulled 2026-09-12
…On Windows, the PHP package fetches an additional encoded second stage from apachelicense.vercel.app/getAddress?platform=logmain&id=LOG , decodes it, and launches it with -c . Related: One Boolean parameter broke authentication…
Contagious Interview Hits npm, PyPI, Go, Rust, PHP — Anonhaven · under “How the loaders work” · published 2026-04-08 · pulled 2026-09-18

Find this indicator in the index, or see every domain this site holds under Domains in the browse listing.

Related indicators

Cited by the same report: North Korea's Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads

Socket lists 27 other indicators in this source. 7 are shown, chosen across types.

All 28 indicators from this source

Cited by the same report: Contagious Interview Hits npm, PyPI, Go, Rust, PHP

Anonhaven lists 9 other indicators in this source. 5 are shown, chosen across types.

All 10 indicators from this source