Tenacious Pungsan: A DPRK threat actor linked to Contagious Interview | Datadog Security Labs
Tags
country: North Korea
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Ip Addresses - T1590.005 Javascript - T1059.007 Keychain - T1634.001 Keychain - T1555.001 Keychain - T1579 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Browser Extensions - T1176 Keychain - T1142
Show in Graph
Common Information
Type Value
UUID 20ec2b26-6c60-4090-b36c-5afe81c25795
Fingerprint 53d619388160781
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 24, 2024, midnight
Added to db Oct. 24, 2024, 5:54 p.m.
Last updated Nov. 17, 2024, 5:56 p.m.
Headline Tenacious Pungsan: A DPRK threat actor linked to Contagious Interview
Title Tenacious Pungsan: A DPRK threat actor linked to Contagious Interview | Datadog Security Labs
Detected Hints/Tags/Attributes 58/3/9
Source URLs
Redirection Url
Details Source https://securitylabs.datadoghq.com/articles/tenacious-pungsan-dprk-threat-actor-contagious-interview/
URL Provider
Details Provider Source level domain
Details datadoghq.com securitylabs.datadoghq.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 230 ✔ Datadog Security Labs https://securitylabs.datadoghq.com/rss/feed.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 272 
outlook.com
Details Domain 1174 
gmail.com
Details Email 1 
austin27ahn@outlook.com
Details Email 1 
g65492036@gmail.com
Details File 674 
node.js
Details File 20 
0.zip
Details File 45 
1.zip
Details File 12 
4.zip
Details IPv4 6 
95.164.17.24