lazarusholic

2025-12-16, ENKI
https://www.enki.co.kr/media-center/blog/kimsuky-distributing-malicious-mobile-app-via-qr-code
#DocSwap #Kimsuky #Mobile

http://27.102.137.181/users2/[email protected]&m=uggcf%3N%2S%2Savq.anire.pbz%2Savqybtva.ybtva
http://27.102.137.106
http://27.102.137.181
https://27.102.137.181/store/SecDelivery.APK
http://27.102.137.106/tracking.php?id=[
https://27.102.137.181/store/delivery.html
http://27.102.137.214
http://27.102.138.163
https://delivery.cjlogistics.kro.kr/loing/tracking.php?id=dGVzdEBuYXZlci5jb20=
http://27.102.137.106/mobile.html
http://27.102.137.181:50005
https://27.102.137.181/store/tracking.php?id=[base64
http://27.102.137.93
http://27.102.138.181
http://27.102.137.180
27.102.138.163
27.102.137.181
27.102.137.106
27.102.138.181
27.102.137.180
27.102.137.93
27.102.137.214
2a7dab4c0f6507bc5fd826f9a336d50c
3a2a9f205c79ee45a84e3d862884fd72
03a117c6cb86859623720e75f839260a
2b99603cd8e69f82c064856d6ff63996
86da5e00a9c73c9cb0855805cbc38c4a
27ea7ef88724c51bbe3ad42853bbc204
858588b7c5331c948fb3e84d9b4ddbb7
c90ee7d3b1226f73044e7ae635493d31
506e136336ca9d7246caf8c9011fe97e
436287ad0ea3a9e94cd4574d54d0dec5
36677d732da69b7a81a46f9a06c36260