`leon91729@zoho.com`

leon91729@zoho.com is an email address that 4 published sources report in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The earliest of those reports is dated 2025-08-03 and the most recent 2026-04-12.

email address APT37 MATCHED IN SOURCE

First seen 2025-08-03 · last seen 2026-04-12

Sources

…"en", "email": "leon24609@gmail.com" , "email_verified": true, "disabled": false, "country": "GB", "locale": "ko", "email": "leon91729@zoho.com" , "email_verified": true, "disabled": false, "country": "JP", "locale": "ko", [Table 3-5] Dropbox Account Information…
RoKRAT Shellcode and Steganographic Threats: Analysis and EDR Response Strategies — Genians · under “3-4. C2 Dropbox Account Information” · published 2025-08-03 · pulled 2026-09-11
…특히 2025년 하반기에는 leon91729@zoho.com 계정이 추가로 확인되었습니다.…
APT37의 프리텍스팅 기반 표적 침투: 페이스북 정찰과 소프트웨어 변조 공격 분석 — Genians · under “5-2. Facebook 및 Zoho 활용 정보” · published 2026-04-12 · pulled 2026-09-12
…"en", "email": "leon24609@gmail.com" , "email_verified": true, "disabled": false, "country": "GB", "locale": "ko", "email": "leon91729@zoho.com" , "email_verified": true, "disabled": false, "country": "JP", "locale": "ko", [표 3-5] Dropbox 가입자 이력 정보 [그림 3-13]…
RoKRAT 셸코드 및 스테가노그래피 기반 위협 분석과 EDR 대응 방안 — Genians · under “3-4. C2 Dropbox 가입자 정보” · published 2025-08-03 · pulled 2026-09-12
…In particular, the account " leon91729@zoho.com " was additionally identified in the second half of 2025.…
APT37’s Pretexting-Based Targeted Intrusion: Analysis of Facebook Reconnaissance and Software Tampering Attacks — Genians · under “5-2. Facebook and Zoho-Related Findings” · published 2026-04-12 · pulled 2026-09-12

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: RoKRAT Shellcode and Steganographic Threats: Analysis and EDR Response Strategies

Genians lists 15 other indicators in this source. 5 are shown, chosen across types.

All 16 indicators from this source

Cited by the same report: APT37의 프리텍스팅 기반 표적 침투: 페이스북 정찰과 소프트웨어 변조 공격 분석

Genians lists 7 other indicators in this source. 4 are shown, chosen across types.

All 8 indicators from this source

Cited by the same report: RoKRAT 셸코드 및 스테가노그래피 기반 위협 분석과 EDR 대응 방안

Genians lists 9 other indicators in this source. 3 are shown, chosen across types.

All 10 indicators from this source