North Korea Hackers Weaponize GitHub to Target Developers
ID: fb38ecce-80d5-5195-99ef-8bb3b7623e65
STIX ID: report--fb38ecce-80d5-5195-99ef-8bb3b7623e65
Feed Name: GBHackers
Threat Score
This report is a consolidated IOC table for an active malicious campaign observed in April–May 2026, listing numerous attacker-controlled email addresses and sender domains, related infrastructure domains, a C2 IP (23.137.105.75), attacker Git repositories, and SHA256 hashes for multi-platform artifacts (Windows, Linux, macOS) and loader scripts, indicating a coordinated email-led distribution and C2-enabled malware operation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.