`ms-office.services`

ms-office.services is a domain that one published source reports in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Google. The report is dated 2022-12-07.

domain APT37 MATCHED IN SOURCE

First seen 2022-12-07 · last seen 2022-12-07

Registration

The registry had no record of ms-office.services when it was looked up on 2026-10-05: the registration had lapsed or been deleted.

Source

…08f93351d0d3905bee5b0c2b9215d448abb0d3cf49c0f8b666c46df4fcc007cb C2: word-template.net openxmlformat.org ms-office.services ms-offices.com template-openxml.com Posted in: Threat Analysis Group…
Internet Explorer 0-day exploited by North Korean actor APT37 — Google · under “Conclusions” · published 2022-12-07 · pulled 2026-09-12

Find this indicator in the index, or see every domain this site holds under Domains in the browse listing.

Related indicators

Cited by the same report: Internet Explorer 0-day exploited by North Korean actor APT37

Google lists 4 other indicators in this source.