북한 에서 만든 쿠팡 NFT 로 위장 하고 있는 피싱 사이트-coupang(.)cam(2023.7.18)
2023-07-21 • Sakai • Phishing site disguised as Coupang NFT made in North Korea - coupang(.)cam (2023.7.18) •
The source describes a North Korea-attributed phishing site at coupang.cam that impersonated Coupang with a fake NFT giveaway tied to the brand's NYSE listing. The page reused Coupang-style content and legitimate-looking navigation or social links, but its main purpose was to persuade visitors to connect a cryptocurrency wallet for an airdrop. The article shows a WalletConnect QR flow and supporting web/HTTP details, including Cloudflare responses and source-code elements copied from or modeled on Coupang infrastructure. The author assessed the operation as financially motivated cryptocurrency theft and reported the site to multiple browser and security-blocking services.
Indicators of Compromise
| Type | Value | First Seen | Last Seen |
|---|---|---|---|
| DOMAIN | korean-air.org | 2023-07-21 | 2023-07-25 |
| HASH | eb6a30daab336687b3d5fb39d6ccacee | 2023-07-21 | 2023-07-21 |
| URL | http://coupang.cam/ | 2023-07-21 | 2023-07-21 |
| DOMAIN | static.coupangcdn.com | 2023-07-21 | 2023-07-21 |
| DOMAIN | private.coupang.com | 2023-07-21 | 2023-07-21 |
| DOMAIN | 2fg.bridge.walletconnect.org | 2023-07-21 | 2023-07-21 |
| DOMAIN | assets.coupangcdn.com | 2023-07-21 | 2023-07-21 |
| DOMAIN | image1.coupangcdn.com | 2023-07-21 | 2023-07-21 |
| DOMAIN | assets2.coupang.com | 2023-07-21 | 2023-07-21 |
| DOMAIN | coupang.cam | 2023-07-21 | 2023-07-21 |
| DOMAIN | thumbnail1.coupangcdn.com | 2023-07-21 | 2023-07-21 |
| DOMAIN | img1a.coupangcdn.com | 2023-07-21 | 2023-07-21 |
| DOMAIN | assets.coupang.com | 2023-07-21 | 2023-07-21 |
| DOMAIN | cart.coupang.com | 2023-07-21 | 2023-07-21 |
| DOMAIN | asset1.coupangcdn.com | 2023-07-21 | 2023-07-21 |