PurpleBravo’s Targeting of the IT Software Supply Chain
Contents
PurpleBravo’s Targeting of the IT Software Supply Chain
Executive Summary
PurpleBravo is a North Korean state-sponsored threat group that overlaps with the “Contagious Interview” campaign first documented in November 2023. It targets software developers, especially in the software development and cryptocurrency verticals, via fake recruiter outreach, interview coding tests, and ClickFix prompts. Activity throughout 2025 has linked multiple fraudulent LinkedIn personas to PurpleBravo through malicious GitHub repositories and fictitious lure brands. The group’s tool set includes BeaverTail (a JavaScript infostealer and loader) and multi-platform remote access trojans (RATs), specifically, PyLangGhost and GolangGhost, optimized for stealing browser credentials and cryptocurrency wallet information.
Based on Recorded Future® Network Intelligence, Insikt Group identified 3,136 individual IP addresses concentrated in South Asia and North America linked to likely targets of PurpleBravo activity from August 2024 to September 2025. Twenty potential victim organizations were observed across the AI, cryptocurrency, financial services, IT services, marketing, and software development verticals …
Executive Summary
PurpleBravo is a North Korean state-sponsored threat group that overlaps with the “Contagious Interview” campaign first documented in November 2023. It targets software developers, especially in the software development and cryptocurrency verticals, via fake recruiter outreach, interview coding tests, and ClickFix prompts. Activity throughout 2025 has linked multiple fraudulent LinkedIn personas to PurpleBravo through malicious GitHub repositories and fictitious lure brands. The group’s tool set includes BeaverTail (a JavaScript infostealer and loader) and multi-platform remote access trojans (RATs), specifically, PyLangGhost and GolangGhost, optimized for stealing browser credentials and cryptocurrency wallet information.
Based on Recorded Future® Network Intelligence, Insikt Group identified 3,136 individual IP addresses concentrated in South Asia and North America linked to likely targets of PurpleBravo activity from August 2024 to September 2025. Twenty potential victim organizations were observed across the AI, cryptocurrency, financial services, IT services, marketing, and software development verticals …
IoC
http://38.75.136.211
http://23.228.120.12
http://36.104.38.0/24
http://95.179.135.133
http://147.124.214.129
http://154.58.204.15
http://index.js
http://66.115.157.242
http://166.0.190.170
http://167.88.61.148
http://123.173.202.0/24
http://67.43.49.10
http://172.96.141.172
http://165.140.86.154
http://147.124.197.138
http://144.172.104.113
http://103.214.44.138
http://23.104.209.6
http://103.111.113.26
http://211.22.184.184
http://23.106.70.154
http://routes.js
http://66.235.168.17
http://proxy-seller.com
http://158.255.76.195
http://185.65.205.130
http://37.120.154.98
http://135.181.7.162
http://23.237.102.130
http://104.168.14.206
http://95.143.193.150
http://172.86.109.49
http://37.120.210.2
http://172.86.116.90
http://50.7.159.34
http://144.172.109.155
http://61.221.116.19
http://45.86.208.162
http://89.187.161.220
http://38.134.148.218
http://212.129.10.242
http://37.120.151.162
http://outlook.com
http://158.62.198.177
http://192.161.60.132
http://61.218.132.193
http://45.43.11.201
http://45.250.255.59
http://42.97.230.0/24
http://194.33.45.162
http://45.61.150.30
http://107.189.24.80
http://188.43.33.252
http://45.145.68.10
http://powervps.net
http://66.235.175.117
http://38.170.181.10
http://185.135.76.89
http://106.41.253.0/24
http://63.176.219.134
http://67.203.7.200
http://lumanagi.online
http://14.37.47.13
http://23.227.202.244
http://45.61.133.110
http://23.237.33.110
http://61.221.116.28
http://64.32.17.130
http://185.135.76.115
http://165.140.86.227
http://38.32.68.195
http://31.57.243.55
http://103.172.26.58
http://211.21.6.181
http://211.22.147.226
http://217.138.212.194
http://172.86.113.115
http://154.58.204.15:8080
http://212.81.47.217
http://146.70.253.107
http://66.235.175.109
http://199.168.113.31
http://45.250.255.140
http://107.150.38.250
http://185.245.80.217
http://89.163.154.155
http://residentialvps.com
http://147.124.212.125
http://82.103.129.80
http://104.223.63.2
http://104.223.87.12
http://45.61.128.61
http://167.160.181.2
http://45.59.163.56
http://125.227.82.145
http://165.140.86.181
http://61.221.116.109
http://223.104.144.0/24
http://91.239.130.102
http://198.2.228.23
http://173.232.230.137
http://162.251.70.66
http://38.92.47.152
http://144.172.102.21
http://204.44.96.131
http://104.250.148.58
http://50.7.251.66
http://31.57.243.190
http://61.219.114.7
http://74.222.14.74
http://147.124.213.232
http://63.143.61.57
http://202.87.221.237
http://94.46.23.20
http://211.72.35.118
http://38.246.149.2
http://85.195.72.66
http://142.214.202.2
http://209.127.228.186
http://74.222.14.83
http://116.142.10.0/24
http://129.232.193.253
http://144.172.105.189
http://5.42.206.34
http://lunaproxy.com
http://172.86.123.55
http://80.90.48.191
http://172.86.73.198
http://107.167.25.130
http://173.254.200.134
http://95.216.14.148
http://36.49.207.0/24
http://36.49.223.0/24
http://103.16.228.16
http://206.206.127.80
http://144.172.102.148
http://223.104.143.0/24
http://211.75.42.136
http://134.195.197.175
http://144.172.100.124
http://169.38.75.87
http://192.119.10.67
http://31.7.63.94
http://gmail.com
http://216.126.229.166
http://108.181.41.234
http://155.94.199.59
http://60.234.42.250
http://103.125.234.62
http://211.75.74.223
http://36.104.22.0/24
http://66.235.168.232
http://185.183.104.67
http://45.61.135.4
http://38.75.137.213
http://88.218.0.78
http://103.125.234.161
http://89.187.161.180
http://125.227.80.190
http://ip-api.com
http://118.107.244.171
http://82.223.120.180
http://74.63.233.50
http://178.175.128.98
http://50.118.211.10
http://199.168.112.175
http://211.72.35.109
http://43.230.201.57
http://23.106.161.1
http://208.115.228.234
http://36.104.182.0/24
http://103.125.234.210
http://147.124.213.19
http://211.21.6.136
http://106.41.254.0/24
http://216.173.115.200
http://107.172.97.67
http://144.172.95.226
http://39.144.101.0/24
http://45.61.160.28
http://147.124.214.131
http://23.106.169.120
http://206.206.127.135
http://84.17.41.94
http://169.38.98.22
http://144.172.103.97
http://36.49.222.0/24
http://214.129:1244
http://38.92.47.118
http://103.130.145.210
http://144.172.106.133
http://151.243.101.229
http://66.187.75.186
http://51.195.140.214
http://38.75.137.97
http://116.142.9.0/24
http://185.152.67.39
http://70.36.99.82
http://211.72.116.247
http://193.19.205.26
http://192.74.247.161
http://162.251.62.70
http://147.124.214.237
http://66.235.168.238
http://205.234.203.122
http://178.159.7.34
http://91.207.174.99
http://45.59.163.23
http://208.98.44.2
http://165.140.85.105
http://45.126.210.144
http://60.249.92.67
http://144.172.112.106
http://85.195.119.90
http://107.167.244.42
http://103.125.234.107
http://38.92.47.85
http://170.178.177.178
http://204.152.202.111
http://165.140.86.160
http://31.57.243.29
http://91.207.206.10
http://104.250.131.79
http://61.218.138.181
http://66.150.196.58
http://67.43.48.10
http://198.23.148.18
http://38.92.47.151
http://50.2.184.50
http://167.88.61.117
http://38.92.47.155
http://89.187.185.11
http://125.227.75.208
http://91.221.66.87
http://103.157.217.145
http://36.35.56.0/24
http://67.203.7.163
http://176.222.52.77
http://173.211.70.246
http://43.230.201.68
http://77.247.126.189
http://38.146.28.177
http://125.227.90.115
http://84.17.38.140
http://67.43.54.10
http://103.6.219.221
http://144.172.106.7
http://216.227.145.218
http://sms-activate.io
http://103.50.33.16
http://144.172.105.235
http://195.146.5.31
http://144.172.109.98
http://23.160.56.155
http://67.203.7.205
http://154.62.226.22
http://38.92.47.91
http://45.61.165.45
http://216.45.56.2
http://144.172.100.142
67.203.7.200
39.144.101.0
176.222.52.77
103.111.113.26
103.125.234.161
103.125.234.210
185.65.205.130
217.138.212.194
77.247.126.189
42.97.230.0
37.120.154.98
89.187.161.180
104.250.148.58
165.140.85.105
38.92.47.155
38.75.137.97
144.172.109.155
5.42.206.34
36.35.56.0
85.195.119.90
216.173.115.200
142.214.202.2
158.62.198.177
169.38.75.87
104.223.87.12
199.168.113.31
38.92.47.118
104.223.63.2
212.129.10.242
192.161.60.132
23.227.202.244
61.221.116.28
107.167.25.130
116.142.10.0
144.172.104.113
178.159.7.34
147.124.214.237
103.157.217.145
198.2.228.23
50.7.251.66
144.172.102.21
107.150.38.250
104.168.14.206
185.135.76.89
36.104.22.0
85.195.72.66
154.62.226.22
205.234.203.122
107.167.165.11
185.245.80.217
36.49.207.0
66.150.196.58
45.59.163.23
165.140.86.160
146.70.253.107
45.61.160.28
36.49.222.0
165.140.86.181
211.21.6.181
144.172.95.226
45.61.165.45
38.75.137.213
204.152.202.111
36.104.182.0
170.178.177.178
67.203.7.205
38.92.47.151
172.86.109.49
208.98.44.2
36.104.38.0
66.235.168.238
82.103.129.80
50.7.159.34
45.61.128.61
223.104.144.0
67.203.7.163
107.189.24.80
50.2.184.50
147.124.214.131
199.168.112.175
104.250.131.79
167.160.181.2
155.94.199.59
43.230.201.68
23.106.70.154
165.140.86.154
209.127.228.186
144.172.106.133
144.172.105.235
91.207.174.99
211.72.35.118
206.206.127.80
103.130.145.210
185.152.67.39
38.134.148.218
43.230.201.57
31.57.243.55
192.119.10.67
125.227.75.208
188.43.33.252
144.172.103.97
158.255.76.195
185.183.104.67
211.75.74.223
172.86.113.115
23.104.209.6
202.87.221.237
63.143.61.57
195.146.5.31
166.0.190.170
194.33.45.162
23.237.102.130
45.250.255.59
84.17.41.94
103.214.44.138
144.172.105.189
45.145.68.10
45.126.210.144
95.143.193.150
147.124.214.129
61.221.116.19
88.218.0.78
144.172.102.148
204.44.96.131
74.63.233.50
38.75.136.211
60.234.42.250
147.124.197.138
66.235.175.109
82.223.120.180
134.195.197.175
89.163.154.155
103.16.228.16
173.211.70.246
125.227.82.145
178.175.128.98
211.21.6.136
38.146.28.177
135.181.7.162
14.37.47.13
162.251.70.66
211.22.184.184
66.187.75.186
144.172.100.124
31.57.243.190
107.172.97.67
167.88.61.117
74.222.14.83
61.219.114.7
167.88.61.148
61.218.138.181
212.81.47.217
45.61.150.30
129.232.193.253
162.251.62.70
198.23.148.18
66.115.157.242
208.115.228.234
36.49.223.0
23.106.169.120
23.237.33.110
125.227.90.115
216.126.229.166
61.218.132.193
67.43.49.10
103.6.219.221
193.19.205.26
216.227.145.218
106.41.254.0
91.207.206.10
169.38.98.22
103.125.234.62
172.86.73.198
38.170.181.10
154.58.204.15
172.96.141.172
61.221.116.109
172.86.123.55
66.235.168.17
67.43.54.10
91.239.130.102
38.92.47.85
223.104.143.0
106.41.253.0
37.120.151.162
80.90.48.191
118.107.244.171
45.43.11.201
147.124.212.125
144.172.109.98
45.61.133.110
116.142.9.0
192.74.247.161
147.124.213.19
45.86.208.162
66.235.175.117
89.187.161.220
211.22.147.226
38.92.47.152
84.17.38.140
89.187.185.11
173.232.230.137
173.254.200.134
211.72.35.109
211.75.42.136
50.118.211.10
31.7.63.94
64.32.17.130
103.172.26.58
67.43.48.10
45.61.135.4
91.221.66.87
107.167.244.42
70.36.99.82
165.140.86.227
45.250.255.140
60.249.92.67
103.125.234.107
66.235.168.232
23.106.161.1
172.86.116.90
211.72.116.247
151.243.101.229
144.172.100.142
23.228.120.12
63.176.219.134
216.45.56.2
31.57.243.29
206.206.127.135
38.246.149.2
95.216.14.148
125.227.80.190
103.50.33.16
123.173.202.0
147.124.213.232
38.32.68.195
45.59.163.56
23.160.56.155
144.172.112.106
51.195.140.214
74.222.14.74
94.46.23.20
108.181.41.234
38.92.47.91
144.172.106.7
37.120.210.2
185.135.76.115
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
1ddb90ee672c86e09168792871f6d6d00919b57d24da98d91764e292e765cd29
http://23.228.120.12
http://36.104.38.0/24
http://95.179.135.133
http://147.124.214.129
http://154.58.204.15
http://index.js
http://66.115.157.242
http://166.0.190.170
http://167.88.61.148
http://123.173.202.0/24
http://67.43.49.10
http://172.96.141.172
http://165.140.86.154
http://147.124.197.138
http://144.172.104.113
http://103.214.44.138
http://23.104.209.6
http://103.111.113.26
http://211.22.184.184
http://23.106.70.154
http://routes.js
http://66.235.168.17
http://proxy-seller.com
http://158.255.76.195
http://185.65.205.130
http://37.120.154.98
http://135.181.7.162
http://23.237.102.130
http://104.168.14.206
http://95.143.193.150
http://172.86.109.49
http://37.120.210.2
http://172.86.116.90
http://50.7.159.34
http://144.172.109.155
http://61.221.116.19
http://45.86.208.162
http://89.187.161.220
http://38.134.148.218
http://212.129.10.242
http://37.120.151.162
http://outlook.com
http://158.62.198.177
http://192.161.60.132
http://61.218.132.193
http://45.43.11.201
http://45.250.255.59
http://42.97.230.0/24
http://194.33.45.162
http://45.61.150.30
http://107.189.24.80
http://188.43.33.252
http://45.145.68.10
http://powervps.net
http://66.235.175.117
http://38.170.181.10
http://185.135.76.89
http://106.41.253.0/24
http://63.176.219.134
http://67.203.7.200
http://lumanagi.online
http://14.37.47.13
http://23.227.202.244
http://45.61.133.110
http://23.237.33.110
http://61.221.116.28
http://64.32.17.130
http://185.135.76.115
http://165.140.86.227
http://38.32.68.195
http://31.57.243.55
http://103.172.26.58
http://211.21.6.181
http://211.22.147.226
http://217.138.212.194
http://172.86.113.115
http://154.58.204.15:8080
http://212.81.47.217
http://146.70.253.107
http://66.235.175.109
http://199.168.113.31
http://45.250.255.140
http://107.150.38.250
http://185.245.80.217
http://89.163.154.155
http://residentialvps.com
http://147.124.212.125
http://82.103.129.80
http://104.223.63.2
http://104.223.87.12
http://45.61.128.61
http://167.160.181.2
http://45.59.163.56
http://125.227.82.145
http://165.140.86.181
http://61.221.116.109
http://223.104.144.0/24
http://91.239.130.102
http://198.2.228.23
http://173.232.230.137
http://162.251.70.66
http://38.92.47.152
http://144.172.102.21
http://204.44.96.131
http://104.250.148.58
http://50.7.251.66
http://31.57.243.190
http://61.219.114.7
http://74.222.14.74
http://147.124.213.232
http://63.143.61.57
http://202.87.221.237
http://94.46.23.20
http://211.72.35.118
http://38.246.149.2
http://85.195.72.66
http://142.214.202.2
http://209.127.228.186
http://74.222.14.83
http://116.142.10.0/24
http://129.232.193.253
http://144.172.105.189
http://5.42.206.34
http://lunaproxy.com
http://172.86.123.55
http://80.90.48.191
http://172.86.73.198
http://107.167.25.130
http://173.254.200.134
http://95.216.14.148
http://36.49.207.0/24
http://36.49.223.0/24
http://103.16.228.16
http://206.206.127.80
http://144.172.102.148
http://223.104.143.0/24
http://211.75.42.136
http://134.195.197.175
http://144.172.100.124
http://169.38.75.87
http://192.119.10.67
http://31.7.63.94
http://gmail.com
http://216.126.229.166
http://108.181.41.234
http://155.94.199.59
http://60.234.42.250
http://103.125.234.62
http://211.75.74.223
http://36.104.22.0/24
http://66.235.168.232
http://185.183.104.67
http://45.61.135.4
http://38.75.137.213
http://88.218.0.78
http://103.125.234.161
http://89.187.161.180
http://125.227.80.190
http://ip-api.com
http://118.107.244.171
http://82.223.120.180
http://74.63.233.50
http://178.175.128.98
http://50.118.211.10
http://199.168.112.175
http://211.72.35.109
http://43.230.201.57
http://23.106.161.1
http://208.115.228.234
http://36.104.182.0/24
http://103.125.234.210
http://147.124.213.19
http://211.21.6.136
http://106.41.254.0/24
http://216.173.115.200
http://107.172.97.67
http://144.172.95.226
http://39.144.101.0/24
http://45.61.160.28
http://147.124.214.131
http://23.106.169.120
http://206.206.127.135
http://84.17.41.94
http://169.38.98.22
http://144.172.103.97
http://36.49.222.0/24
http://214.129:1244
http://38.92.47.118
http://103.130.145.210
http://144.172.106.133
http://151.243.101.229
http://66.187.75.186
http://51.195.140.214
http://38.75.137.97
http://116.142.9.0/24
http://185.152.67.39
http://70.36.99.82
http://211.72.116.247
http://193.19.205.26
http://192.74.247.161
http://162.251.62.70
http://147.124.214.237
http://66.235.168.238
http://205.234.203.122
http://178.159.7.34
http://91.207.174.99
http://45.59.163.23
http://208.98.44.2
http://165.140.85.105
http://45.126.210.144
http://60.249.92.67
http://144.172.112.106
http://85.195.119.90
http://107.167.244.42
http://103.125.234.107
http://38.92.47.85
http://170.178.177.178
http://204.152.202.111
http://165.140.86.160
http://31.57.243.29
http://91.207.206.10
http://104.250.131.79
http://61.218.138.181
http://66.150.196.58
http://67.43.48.10
http://198.23.148.18
http://38.92.47.151
http://50.2.184.50
http://167.88.61.117
http://38.92.47.155
http://89.187.185.11
http://125.227.75.208
http://91.221.66.87
http://103.157.217.145
http://36.35.56.0/24
http://67.203.7.163
http://176.222.52.77
http://173.211.70.246
http://43.230.201.68
http://77.247.126.189
http://38.146.28.177
http://125.227.90.115
http://84.17.38.140
http://67.43.54.10
http://103.6.219.221
http://144.172.106.7
http://216.227.145.218
http://sms-activate.io
http://103.50.33.16
http://144.172.105.235
http://195.146.5.31
http://144.172.109.98
http://23.160.56.155
http://67.203.7.205
http://154.62.226.22
http://38.92.47.91
http://45.61.165.45
http://216.45.56.2
http://144.172.100.142
67.203.7.200
39.144.101.0
176.222.52.77
103.111.113.26
103.125.234.161
103.125.234.210
185.65.205.130
217.138.212.194
77.247.126.189
42.97.230.0
37.120.154.98
89.187.161.180
104.250.148.58
165.140.85.105
38.92.47.155
38.75.137.97
144.172.109.155
5.42.206.34
36.35.56.0
85.195.119.90
216.173.115.200
142.214.202.2
158.62.198.177
169.38.75.87
104.223.87.12
199.168.113.31
38.92.47.118
104.223.63.2
212.129.10.242
192.161.60.132
23.227.202.244
61.221.116.28
107.167.25.130
116.142.10.0
144.172.104.113
178.159.7.34
147.124.214.237
103.157.217.145
198.2.228.23
50.7.251.66
144.172.102.21
107.150.38.250
104.168.14.206
185.135.76.89
36.104.22.0
85.195.72.66
154.62.226.22
205.234.203.122
107.167.165.11
185.245.80.217
36.49.207.0
66.150.196.58
45.59.163.23
165.140.86.160
146.70.253.107
45.61.160.28
36.49.222.0
165.140.86.181
211.21.6.181
144.172.95.226
45.61.165.45
38.75.137.213
204.152.202.111
36.104.182.0
170.178.177.178
67.203.7.205
38.92.47.151
172.86.109.49
208.98.44.2
36.104.38.0
66.235.168.238
82.103.129.80
50.7.159.34
45.61.128.61
223.104.144.0
67.203.7.163
107.189.24.80
50.2.184.50
147.124.214.131
199.168.112.175
104.250.131.79
167.160.181.2
155.94.199.59
43.230.201.68
23.106.70.154
165.140.86.154
209.127.228.186
144.172.106.133
144.172.105.235
91.207.174.99
211.72.35.118
206.206.127.80
103.130.145.210
185.152.67.39
38.134.148.218
43.230.201.57
31.57.243.55
192.119.10.67
125.227.75.208
188.43.33.252
144.172.103.97
158.255.76.195
185.183.104.67
211.75.74.223
172.86.113.115
23.104.209.6
202.87.221.237
63.143.61.57
195.146.5.31
166.0.190.170
194.33.45.162
23.237.102.130
45.250.255.59
84.17.41.94
103.214.44.138
144.172.105.189
45.145.68.10
45.126.210.144
95.143.193.150
147.124.214.129
61.221.116.19
88.218.0.78
144.172.102.148
204.44.96.131
74.63.233.50
38.75.136.211
60.234.42.250
147.124.197.138
66.235.175.109
82.223.120.180
134.195.197.175
89.163.154.155
103.16.228.16
173.211.70.246
125.227.82.145
178.175.128.98
211.21.6.136
38.146.28.177
135.181.7.162
14.37.47.13
162.251.70.66
211.22.184.184
66.187.75.186
144.172.100.124
31.57.243.190
107.172.97.67
167.88.61.117
74.222.14.83
61.219.114.7
167.88.61.148
61.218.138.181
212.81.47.217
45.61.150.30
129.232.193.253
162.251.62.70
198.23.148.18
66.115.157.242
208.115.228.234
36.49.223.0
23.106.169.120
23.237.33.110
125.227.90.115
216.126.229.166
61.218.132.193
67.43.49.10
103.6.219.221
193.19.205.26
216.227.145.218
106.41.254.0
91.207.206.10
169.38.98.22
103.125.234.62
172.86.73.198
38.170.181.10
154.58.204.15
172.96.141.172
61.221.116.109
172.86.123.55
66.235.168.17
67.43.54.10
91.239.130.102
38.92.47.85
223.104.143.0
106.41.253.0
37.120.151.162
80.90.48.191
118.107.244.171
45.43.11.201
147.124.212.125
144.172.109.98
45.61.133.110
116.142.9.0
192.74.247.161
147.124.213.19
45.86.208.162
66.235.175.117
89.187.161.220
211.22.147.226
38.92.47.152
84.17.38.140
89.187.185.11
173.232.230.137
173.254.200.134
211.72.35.109
211.75.42.136
50.118.211.10
31.7.63.94
64.32.17.130
103.172.26.58
67.43.48.10
45.61.135.4
91.221.66.87
107.167.244.42
70.36.99.82
165.140.86.227
45.250.255.140
60.249.92.67
103.125.234.107
66.235.168.232
23.106.161.1
172.86.116.90
211.72.116.247
151.243.101.229
144.172.100.142
23.228.120.12
63.176.219.134
216.45.56.2
31.57.243.29
206.206.127.135
38.246.149.2
95.216.14.148
125.227.80.190
103.50.33.16
123.173.202.0
147.124.213.232
38.32.68.195
45.59.163.56
23.160.56.155
144.172.112.106
51.195.140.214
74.222.14.74
94.46.23.20
108.181.41.234
38.92.47.91
144.172.106.7
37.120.210.2
185.135.76.115
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
1ddb90ee672c86e09168792871f6d6d00919b57d24da98d91764e292e765cd29