`artndesign2.cafe24.com`

artndesign2.cafe24.com is a hosted site that one published source reports in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Cisco Talos. The report is dated 2018-05-31.

hosted site APT37 MATCHED IN SOURCE

First seen 2018-05-31 · last seen 2018-05-31

Source

…4f06eaed3dd67ce31e7c8258741cf727964bd271c3590ded828ad7ba8d04ee57 Online Payload: http://artndesign2.cafe24.com:80/skin_board/s_build_cafeblog/exp_include/img.png 2016 NavRAT sample: e0257d187be69b9bee0a731437bf050d56d213b50a6fd29dd6664e7969f286ef…
NavRAT Uses US-North Korea Summit As Decoy For Attacks In South Korea — Cisco Talos · under “IOCs Malicious HWP: e5f191531bc1c674ea74f8885449f4d934d5f1aa7fd3aaa283fe70f9402b9574” · published 2018-05-31 · pulled 2026-09-12

Find this indicator in the index, or see every hosted site this site holds under Hosted sites in the browse listing.

Related indicators

Cited by the same report: NavRAT Uses US-North Korea Summit As Decoy For Attacks In South Korea

Cisco Talos lists 1 other indicator in this source.