poole.sion2015@yandex.com

poole.sion2015@yandex.com is an email address that one published source reports in connection with Konni activity, which public reporting attributes to North Korea (DPRK). It is cited here from Anquanke. The report is dated 2021-02-01.

email address Konni MATCHED IN SOURCE

First seen 2021-02-01 · last seen 2021-02-01

Source

  • …C2 服务器 http://securelevel.site/pppp/index.php,经过对比,与 Kimsuky 所使用的 C2 服务器 Whois 注册信息完全一致。 注册者 aoler jack 邮箱 poole.sion2015@yandex.com 电话 +82.12035386476 图23.…
    Konni APT 组织以朝鲜疫情物资话题为诱饵的攻击活动分析 — Anquanke · under “与 Kimsuky APT 组织的关联性” · published 2021-02-01 · pulled 2026-09-12

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: Konni APT 组织以朝鲜疫情物资话题为诱饵的攻击活动分析

Anquanke lists 14 other indicators in this source. 12 are shown, chosen across types.

All 15 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.