`saycisa@cisa.dhs.gov`

saycisa@cisa.dhs.gov is an email address that 2 published sources report in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from CISA. The reports are dated 2018-12-21.

email address Lazarus Group MATCHED IN SOURCE

First seen 2018-12-21 · last seen 2018-12-21

Sources

…All comments or questions related to this document should be directed to the CISA at 1-844-Say-CISA or SayCISA@cisa.dhs.gov. Can I submit malware to CISA? Malware samples can be submitted via three methods: Web: https://malware.us-cert.gov E-Mail:…
MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware | CISA — CISA · under “Document FAQ” · published 2018-12-21 · pulled 2026-09-12
…To report an intrusion and request resources for incident response or technical assistance, contact CISA Central at ( SayCISA@cisa.dhs.gov or 1-844-Say-CISA), FBI through a local field office, or the FBI’s Cyber Division ( CyWatch@fbi.gov or 855-292-3937). References [1]…
HIDDEN COBRA – FASTCash Campaign | CISA — CISA · under “Response to Unauthorized Network Access” · published 2018-12-21 · pulled 2026-09-12

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware | CISA

CISA lists 40 other indicators in this source. 12 are shown, chosen across types.

All 41 indicators from this source