https://ausbildungsbuddy.de/modules/mod_mail/src/upload.php
https://ausbildungsbuddy.de/modules/mod_mail/src/upload.php is a payload URL
that one published source reports
in connection with Konni activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from navneet.
The report is dated 2025-04-21.
payload url Konni MATCHED IN SOURCE
Source
-
…URL https://ausbildungsbuddy.de/modules/mod_mail/src/upload.php C2 endpoint for data exfiltration.…
A Deep Dive Into a Multi-Stage Malware Campaign Potentially Linked to DPRK’s Konni Group — navneet
Find this indicator in the index, or see every payload URL this site holds under Payload URLs in the browse listing.