← All actor clusters

live:rjh917

live:rjh917 is a Skype account that one published source reports in connection with Kimsuky and Konni activity, which public reporting attributes to North Korea (DPRK). It is cited here from ESTsecurity ALYac. The report is dated 2019-04-17.

skype account KimsukyKonni MATCHED IN SOURCE

First seen 2019-04-17 · last seen 2019-04-17

Source

• …흥미로운 점은 이 사람이 한국어로 글을 올리고 있었다는 점이며, 스카이프 계정으로 'live:rjh917'을 사용하고 있다는 것입니다.…

  한ㆍ미 겨냥 APT 캠페인 '스모크 스크린' Kimsuky 실체 공개 (아웃소싱 공격) — ESTsecurity ALYac · under “본문” · published 2019-04-17 · pulled 2026-09-12

Find this indicator in the index, or see every Skype account this site holds under Skype accounts in the browse listing.

Related indicators

Cited by the same report: 한ㆍ미 겨냥 APT 캠페인 '스모크 스크린' Kimsuky 실체 공개 (아웃소싱 공격)

ESTsecurity ALYac lists 25 other indicators in this source. 12 are shown, chosen across types.

• hine1993@hotmail.com email address
• jamshine1993@hotmail.com email address
• snow8949@hotmail.com email address
• 03dbc1b3d79a4ff70f06fd6e67e00985 file hash
• e68b11bef48e8e88cba7e3c93fac5eab file hash
• f816a9c4a3415e8bae807c09e0f80b38 file hash
• https://github.com/cryptonotefoundation GitHub account
• https://github.com/devaji917 GitHub account
• https://github.com/fungsyujonggu GitHub account
• 110.4.107.244 IP address
• 192.186.142.74 IP address
• 15vsH2T3ss9owzuaGnN7ee155tEwS4igFg cryptocurrency wallet address

All 26 indicators from this source