118.193.69.151
118.193.69.151 is an IP address
that 2 published sources report
in connection with Contagious Interview and Kimsuky activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Genians.
The reports are dated 2025-07-01.
ip address Contagious InterviewKimsuky MATCHED IN SOURCE
Network
| Kind | data centre |
|---|---|
| Network | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED |
| Announced by | AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED |
| Country | South Korea |
| Flags | hosting range |
Sources
-
…'Adersoft'에서 배포하는 'VBScript Editor with Debugger' 프로그램의 Launcher 파일을 이용해 악성 manifest 파일을 호출합니다. ○ 아울러 C2 서버 'androcl.csproject.org', '118.193.69.151' (KR) 주소와 통신시 기존 'BabyShark' 패턴과 유사한 것을 알 수 있습니다.…
'클릭픽스' 전술을 활용한 김수키 그룹 위협 사례 분석 — Genians -
…with Debugger” program to execute a malicious manifest file. ○ Additionally, communication with the C2 servers androcl.csproject.org and 118.193.69.151 (KR) exhibited patterns similar to those seen in previous “BabyShark” activity.…
Analysis of the threat case of kimsuky group using 'ClickFix' tactic — Genians
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.
Related indicators
Cited by the same report: '클릭픽스' 전술을 활용한 김수키 그룹 위협 사례 분석
All 33 indicators from this source