`rsh1213@hotmail.com`

rsh1213@hotmail.com is an email address that 3 published sources report in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kaspersky Securelist, AhnLab ASEC and SOCRadar. The earliest of those reports is dated 2013-09-11 and the most recent 2023-07-25.

email address Kimsuky MATCHED IN SOURCE

First seen 2013-09-11 · last seen 2023-07-25

Sources

…They report on status and transmit infected system information via attachments: iop110112@hotmail.com rsh1213@hotmail.com 1 2 iop110112 @ hotmail .…
Securelist | The “Kimsuky” Operation: A North Korean APT? | Securelist — Kaspersky Securelist · under “Communications” · published 2013-09-11 · pulled 2026-09-11
…공격자 (추정정보) 2013년 9월 처음 소개된 해당 악성코드는 당시 발견된 공격자 웹 메일 계정( iop110112@hotmail.com , rsh1213@hotmail.com )을 통해 회득한 “kimsukyang”, “Kim asdfa” 정보를 통해 “Kimsuky” 라는 이름으로 명명되었다.…
APT 공격 - 새로운 "Kimsuky" 악성코드 등장 - ASEC — AhnLab ASEC · under “APT 공격 – 새로운 “Kimsuky” 악성코드 등장” · published 2014-03-18 · pulled 2026-09-12
…samples’ strings contain the “Kim” keyword: “kimm.r-naver.com”, “kimsukyang and Kim asdfa” the owner of “iop110112@hotmail.com and rsh1213@hotmail.com domains extracted in one of the first observations. And other IoCs contain “tjkim”, “kimyfrenotsure”, “kimshan”, “Kim_Summit”, etc.…
APT Profile: Kimsuky — SOCRadar · under “Connections with Other APT Groups” · published 2023-07-25 · pulled 2026-09-12

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: Securelist | The “Kimsuky” Operation: A North Korean APT? | Securelist

Kaspersky Securelist lists 11 other indicators in this source. 5 are shown, chosen across types.

All 12 indicators from this source

Cited by the same report: APT 공격 - 새로운 "Kimsuky" 악성코드 등장 - ASEC

AhnLab ASEC lists 23 other indicators in this source. 4 are shown, chosen across types.

All 24 indicators from this source

Cited by the same report: APT Profile: Kimsuky

SOCRadar lists 2 other indicators in this source.