sandozmessi@gmail.com

sandozmessi@gmail.com is an email address that 4 published sources report in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The earliest of those reports is dated 2024-03-27 and the most recent 2025-05-12.

email address APT37 MATCHED IN SOURCE

First seen 2024-03-27 · last seen 2025-05-12

Sources

  • …포함된 PDB 화면 ○ 'DogCall.pdb' 문자열이 포함된 백도어는 'MITRE ATT&CK' 소프트웨어 항목에 포함돼 있으며, 2017년부터 계속 발견된 바 있습니다. ○ 'softpower21cs@gmail.com' 이메일은 'sandozmessi@gmail.com' 주소의 복구 계정으로 연결되어 있습니다.…
    APT37 그룹의 RoKRAT 파일리스 공격 증가 — Genians · under “4. RoKRAT 소개 (About RoKRAT)” · published 2024-03-27 · pulled 2026-09-11
  • Nearby text:

    …Gmail Addresses tanessha.samuel@gmail.com tianling0315@gmail.com w.sarah0808@gmail.com softpower21cs@gmail.com sandozmessi@gmail.com ○ Username searches based on the Yandex email addresses returned LinkedIn profiles with matching names.…
    Analysis of APT37 Attack Case Disguised as a Think Tank for National Security Strategy in South Korea (Operation. ToyBox Story) — Genians · under “5-1. Traces of the Threat Actor” · published 2025-05-12 · pulled 2026-09-11
  • Nearby text:

    …식별됐던 대표적인 이메일 계정은 다음과 같습니다. tanessha.samuel@gmail.com tianling0315@gmail.com w.sarah0808@gmail.com softpower21cs@gmail.com sandozmessi@gmail.com ○ 'panic.dat' 파일은 Shellcode 루틴을 통해 암호화된 RoKRAT 모듈이 실행됩니다. [그림 4-2] Shellcode 디코딩 화면 ○ 주 스레드 실행 중에 RoKRAT 명령어는 피해 시스템을 제어하는 데…
    APT37 위협 배후의 사이버 정찰 활동 분석 — Genians · under “3. 유사 악성프로그램 (Similar malware)” · published 2024-11-05 · pulled 2026-09-12
  • Nearby text:

    …계정이 공개된 바 있습니다. 지메일(Gmail) 주소 tanessha.samuel@gmail.com tianling0315@gmail.com w.sarah0808@gmail.com softpower21cs@gmail.com sandozmessi@gmail.com ○ 얀덱스 이메일에 사용된 아이디를 검색하면, 동일 이름의 링크드인 이용자가 일부 조회됩니다.…
    한국 국가안보전략 싱크탱크 위장 APT37 공격 사례 분석 (작전명. 토이박스 스토리) — Genians · under “5-1. 위협 행위자(Threat Actor)의 흔적” · published 2025-05-12 · pulled 2026-09-12

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: APT37 그룹의 RoKRAT 파일리스 공격 증가

Genians lists 5 other indicators in this source.

Cited by the same report: Analysis of APT37 Attack Case Disguised as a Think Tank for National Security Strategy in South Korea (Operation. ToyBox Story)

Genians lists 21 other indicators in this source. 4 are shown, chosen across types.

All 22 indicators from this source

Cited by the same report: APT37 위협 배후의 사이버 정찰 활동 분석

Genians lists 17 other indicators in this source. 3 are shown, chosen across types.

All 18 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.