yuri.sidorav@yandex.ru

yuri.sidorav@yandex.ru is an email address that one published source reports in connection with Konni activity, which public reporting attributes to North Korea (DPRK). It is cited here from Paloalto Networks. The report is dated 2018-11-29.

email address Konni MATCHED IN SOURCE

First seen 2018-11-29 · last seen 2018-11-29

Source

  • …we are dubbing ‘Fractured Block’. Initial Attack On December 13, 2017, a spear phishing email was sent from the email address of yuri.sidorav@yandex.ru to a high ranking individual within a British government agency.…
    The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asi — Paloalto Networks · under “The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia” · published 2018-11-29 · pulled 2026-09-12

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asi

Paloalto Networks lists 7 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.