91.235.116.144
91.235.116.144 is an IP address
that 2 published sources report
in connection with Kimsuky and Konni activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from ESTsecurity ALYac.
The earliest of those reports is dated 2019-08-24 and the most recent 2020-11-22.
ip address KimsukyKonni MATCHED IN SOURCE
Network
| Kind | fixed line |
|---|---|
| Network | Tipzor Media SRL |
| Announced by | AS51177 TIPZOR MEDIA SRL |
| Country | Romania |
Sources
-
…193.148.16.45 BithumbProtect_v1.0.5.apk app.project.appcheck N/A N/A c1063cfa402e64882d41f88ada87c8d1 manage.app-wallet.com (91.235.116.144) - 특히, 'manage.app-wallet.com' C2 도메인을 등록한 내용을 확인해 보면, 등록자명은 'Annie Cho'이고 이메일 주소는 ' bitcoin025@hanmail.net' 한국 한메일을 쓰고 있습니다.…
코니(Konni) APT 조직, 안드로이드 스파이 활동과 김수키 조직 유사성 분석 — ESTsecurity ALYac -
…BithumbProtect_v1.0.5.apk app.project.appcheck N/A N/A c1063cfa402e64882d41f88ada87c8d1 manage.app-wallet.com (91.235.116.144) refund.apk com.daska 2020/11/ 12 20:11:59 andrei lankov 6bda04173d5f8491348e33cabc98f1b8 naver.midsecurity.org…
[스페셜 리포트] 탈륨(김수키)과 코니 APT 그룹의 연관관계 분석 Part3 — ESTsecurity ALYac
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.
Related indicators
Cited by the same report: 코니(Konni) APT 조직, 안드로이드 스파이 활동과 김수키 조직 유사성 분석
All 40 indicators from this source