185.106.93.154
185.106.93.154 is an IP address
that one published source reports
in connection with APT38 activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Objective-See.
The report is dated 2024-01-01.
ip address APT38 MATCHED IN SOURCE
Network
| Kind | data centre |
|---|---|
| Network | xorek.cloud International LTD |
| Announced by | AS210644 AEZA INTERNATIONAL LTD |
| Country | Germany |
| Flags | hosting range |
Sources
-
…Finally, we see that embedded address of the attacker’s remote server: 185.106.93.154 . The researcher @phd_phuc also pointed out that malware also “targets Chrome, Firefox, Brave, Edge, Vivaldi, Yandex, Opera, and OperaGX.…
The Mac Malware of 2023 — Objective-See -
…Finnie Swash TronWallet CryptoAirdrop ibnejdfjmmkpcnlpebklmnkoeoihofec nkbihfbeogaeaoehlefnkodbefgpgknn bocpokimicclpaiekenaeelehdjllofo 185.106.93.154 POST /sendlog HTTP/1.1 For example, we can see that the malware will display a fake password prompt (via osascript ) in order to get the…
The Mac Malware of 2023 — Objective-See
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.