`kopo1scom98@daum.net`

kopo1scom98@daum.net is an email address that 2 published sources report in connection with APT37 and Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from wezard4u and 0x0v1. The earliest of those reports is dated 2024-03-01 and the most recent 2024-04-09.

email address APT37 Kimsuky MATCHED IN SOURCE

First seen 2024-03-01 · last seen 2024-04-09

Sources

…악성코드 에 포함된 HEX CyberChef 로 디코딩 이메일 발신자 보내는 사람:중앙선거관리위원회 공보과 (kopo1scom98@daum.net) 아무튼 아니 중앙선거관리위원회에서 다음 메일을 사용할 일은 없으니 일단 이거 피싱+악성코드 유포를 하기 위한 목적인 것을 확인할 수가 있습니다. 이메일에는 BAT 스크립트 형태의 OLE 개체가 포함된 HWP Doc이 포함되어 있으며 해당…
북한 해킹 단체 Reaper(리퍼)에서 만든 악성코드-제20대_대통령선거_선거권자_개표참관인_공개_모집(최종).hwp(2022.8.15) — wezard4u · under “북한 해킹 단체 Reaper(리퍼)에서 만든 악성코드-제20대_대통령선거_선거권자_개표참관인_공개_모집(최종).hwp(2022.8.15)” · published 2024-04-09 · pulled 2026-09-12
…subject: 20th_Presidential Election_Election holders_Votecount Observer_Open_Recruitment (Final) Sender: 중앙선거관리위원회 공보과 ( kopo1scom98@daum.net ) Translated sender: Public Information Division, Central Election Commission Diamond model Breakdown: Adversary: APT37 Persona:…
RE:archive | APT37's ROKRAT HWP Object Linking and Embedding — 0x0v1 · under “RE:archive” · published 2024-03-01 · pulled 2026-09-12

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: RE:archive | APT37's ROKRAT HWP Object Linking and Embedding

0x0v1 lists 2 other indicators in this source.