`cimoon185@daum.net`

cimoon185@daum.net is an email address that 2 published sources report in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from ENKI. The reports are dated 2025-09-22.

email address Kimsuky MATCHED IN SOURCE

First seen 2025-09-22 · last seen 2025-09-22

Sources

…It then adds cimoon185@daum.net to the account's list of forwarding addresses. caption - Forward function in chks.js After setting up the forwarding rule, it…
In-Depth Analysis of the APT Down - The North Korea Files leak — ENKI · under “1.6. Yonsei University Email Exfiltration Malware” · published 2025-09-22 · pulled 2026-09-12
…연세대학교 이메일 탈취 악성코드 vps/var/www/html/js/chks.js 파일은 “https://mail.yonsei.ac.kr/common/json/agent.do”에서 유저 정보를 수집하고, 이메일 포워딩 주소 목록에 cimoon185@daum.net 를 추가한다. caption - chks.js Forward 함수 이후 ent_{user}, TOTAL 메일함에서, 발송일이 2017-10-01 이후인 이메일을 탈취해…
APT Down - The North Korea Files 공개 자료 상세 분석 보고서 — ENKI · under “1.6. 연세대학교 이메일 탈취 악성코드” · published 2025-09-22 · pulled 2026-09-12

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: In-Depth Analysis of the APT Down - The North Korea Files leak

ENKI lists 6 other indicators in this source.