lazarus.day
Actors
Reports
Incidents
IoCs
Analytics
Actors
Reports
Incidents
IoCs
Support
gateway001kir.com
Domain
Resolved IPs:
147.135.84.14
First Seen: 2026-04-08
Last Seen: 2026-04-08
Shortcuts:
Censys
Criminal IP
Virustotal
any.run
urlscan
Share:
1
Related Reports
1
Related IOCs
Related Reports
2026-04-08
Phatom Candle
Spoofed IT Tools Distribute EtherRAT in Highly Stealthy Campaign Suspected Linked to DPRK APT
#EtherRAT
#T1566
#T1102
#T1027
#T1547.001
#T1059
#T1001.003
#T1140
« Back
⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.