on-global.xyz - DPRK Threat Intelligence | lazarus.day

on-global.xyz

Domain

URLs on this domain: http://on-global.xyz, http://on-global.xyz/Of56cYsfVV8/OJITWH2WFx/Jy5S7hSx0K/fP7saoiPBc/A==, http://on-global.xyz/Ov56cYsfVV8/OJITWH2WFx/Jy5S7hSx0K/fP7saoiPBc/A==, http://on-global.xyz/Of56cYsfVV8/OJITWH2WFx/Jy5S7hSx0K/fP7saoiPBc/A%3D%3D
First Seen: 2023-11-27
Last Seen: 2023-12-05

Shortcuts: Censys Criminal IP Virustotal any.run urlscan

2

Related Reports
4

Related IOCs

Related Reports

2023-12-05

Kaspersky

New BlueNoroff loader for macOS

#RustBucket #Bluenoroff #macOS

2023-11-27

Sentinel One

DPRK Crypto Theft | macOS RustBucket Droppers Pivot to Deliver KandyKorn Payloads

#RustBucket #Bluenoroff #macOS #KANDYKORN

⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.