37.221.126.117
37.221.126.117 is an IP address
that one published source reports
in connection with Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Silent Push.
The report is dated 2025-04-24.
ip address Contagious Interview CURATED
Network
| Kind | data centre |
|---|---|
| Network | Weiss Hosting Group S.R.L |
| Country | Moldova |
| Flags | hosting range |
Sources
-
C2 endpoint for the Golang variant of the InvisibleFerret backdoor, delivered as nvidiawin.update.zip. Reported by Silent Push as part of the blocknovas.com-centered Contagious Interview infrastructure cluster, on port 8000.
Contagious Interview (DPRK) Launches a New Campaign Creating Three Front Companies to Deliver a Trio of Malware: BeaverTail, InvisibleFerret, and OtterCookie — Silent Push -
…On further investigation of the files, we discovered the file “nvidiaupdate.go” revealed a C2 configuration for the IP address “ 37.221.126.117: 8000.” We saw a similar file structure in our previous reporting, referenced here: North Korea-nexus Golang Backdoor/Stealer from…
Silent Push uncovered Contagious Interview front company scam — Silent Push
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.