glcloudservice.com - DPRK Threat Intelligence | lazarus.day

glcloudservice.com

Domain

Resolved IPs: 34.41.139.193
URLs on this domain: https://glcloudservice.com/v1/status, https://glcloudservice.com/v1/console
First Seen: 2023-03-29
Last Seen: 2024-09-09

Shortcuts: Censys Criminal IP Virustotal any.run urlscan

23

Related Reports
3

Related IOCs

Related Reports

2024-09-09

Paloalto Networks

Threat Assessment: North Korean Threat Groups

#AlluringPisces #CollectionRAT #Comebacker #Fullhouse #GleamingPisces #JumpyPisces #KANDYKORN #ObjCShellz #OdicLoader #POOLRAT #PondRAT #RustBucket #SelectivePisces #SlowPisces #SmoothOperator #SparklingPisces

2023-10-05

Objective-see

Mac-ing sense of the 3CX supply chain attack: analysis of the macOS payloads

#3CXDesktopApp

2023-06-29

UKNCSC

Smooth Operator

#SmoothOperator #3CXDesktopApp #T1119 #T1070.004 #T1008 #T1020 #T1497.003 #T1554 #T1071.001 #T1140 #T1195.001

2023-04-28

Ahnlab

EDR을 활용한 3CX 공급망 침해 사고 추적

#SupplyChain #3CXDesktopApp #SmoothOperator #T1012 #T1574.002 #T1071.001

2023-04-05

Ahnlab

3CX DesktopApp 공급망 공격, 국내에서도 확인

#SupplyChain #3CXDesktopApp #SmoothOperator

2023-04-03

Threat Radar

3CX In The Wild

#SupplyChain #3CXDesktopApp #SmoothOperator

2023-04-03

Hive Pro

SmoothOperator Campaign Trojanizes 3CXDesktopApp

#SupplyChain #3CXDesktopApp #SmoothOperator #T1574 #T1547 #T1547.001 #T1574.002 #T1091 #T1543 #T1543.003 #T1071 #T1059 #T1056

2023-04-03

piyokango

3CXのソフトウエア改ざんによるサプライチェーン攻撃についてまとめてみた

#SupplyChain #3CXDesktopApp #SmoothOperator

2023-03-31

Splunk

Splunk Insights: Investigating the 3CXDesktopApp Supply Chain Compromise

#SupplyChain #3CXDesktopApp #SmoothOperator #T1195

2023-03-31

Group-IB

36gate: supply chain attack

#SmoothOperator #SupplyChain #3CXDesktopApp #36gate

2023-03-30

Trend Micro

Information on Attacks Involving 3CX Desktop App

#SupplyChain #3CXDesktopApp #SmoothOperator

2023-03-30

Fortinet

3CX Desktop App Compromised (CVE-2023-29059)

#SupplyChain #3CXDesktopApp #SmoothOperator #CVE-2023-29059

2023-03-30

Rapid7

Backdoored 3CXDesktopApp Installer Used in Active Threat Campaign

#SupplyChain #3CXDesktopApp #SmoothOperator

2023-03-30

Paloalto Networks

Threat Brief: 3CXDesktopApp Supply Chain Attack

#SupplyChain #3CXDesktopApp #SmoothOperator

2023-03-30

Elastic

Elastic users protected from SUDDENICON’s supply chain attack

#SUDDENICON #SupplyChain #3CXDesktopApp #SmoothOperator

2023-03-30

Volexity

3CX Supply Chain Compromise Leads to ICONIC Incident

#SupplyChain #3CXDesktopApp #SmoothOperator #ICONIC #UTA0040

2023-03-30

Huntress

3CX VoIP Software Compromise & Supply Chain Threats

#SupplyChain #3CXDesktopApp #SmoothOperator #YARA

2023-03-30

Symantec

3CX: Supply Chain Attack Affects Thousands of Users Worldwide

#SupplyChain #3CXDesktopApp #SmoothOperator

2023-03-29

Checkpoint

3CXDesktop App Supply Chain Attack - Check Point Software

#SupplyChain #3CXDesktopApp #SmoothOperator

2023-03-29

Objective-see

Ironing out (the macOS details) of a Smooth Operator

#SupplyChain #3CXDesktopApp #SmoothOperator #macOS

2023-03-29

Sophos

3CX users under DLL-sideloading attack: What you need to know

#SupplyChain #3CXDesktopApp #SmoothOperator

2023-03-29

Sentinel One

SmoothOperator | Ongoing Campaign Trojanizes 3CXDesktopApp in Supply Chain Attack

#SupplyChain #3CXDesktopApp #SmoothOperator

2023-03-29

Crowd Strike

CrowdStrike Prevents 3CXDesktopApp Intrusion Campaign

#LabyrinthChollima #3CXDesktopApp #SupplyChain #SmoothOperator

⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.