`wallet-management-tg-bot.vercel.app`

wallet-management-tg-bot.vercel.app is a hosted site that one published source reports in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Panther Labs. The report is dated 2026-04-24.

hosted site Contagious Interview MATCHED IN SOURCE

First seen 2026-04-24 · last seen 2026-04-24

Source

…as the plaintext levex-press and the J2TEAM-obfuscated gleb-js . Those companion payloads exfiltrated to themed Vercel endpoints such as wallet-management-tg-bot.vercel.app and polymarkettrading.vercel.app , reinforcing that this cluster was built to steal developer secrets and convert them into durable…
Inside DPRK’s npm Malware Factory: 108 Packages & 261 Versions — Panther Labs · under “Cluster F: SSH persistence and Solana/developer key theft” · published 2026-04-24 · pulled 2026-09-02

Find this indicator in the index, or see every hosted site this site holds under Hosted sites in the browse listing.

Related indicators

Cited by the same report: Inside DPRK’s npm Malware Factory: 108 Packages & 261 Versions

Panther Labs lists 97 other indicators in this source. 12 are shown, chosen across types.

All 98 indicators from this source