SEAL weekly stats: 28 Oct - 3 Nov 2026

2026-11-04 • Security Alliance •

https://radar.securityalliance.org/seal-weekly-stats-28-oct-3-nov-2026

Thumbnail for SEAL weekly stats: 28 Oct - 3 Nov 2026

SEAL recorded four DPRK incidents causing $3 million in losses, excluding the separately disclosed Binance incident. Three UNC1069 operations compromised macOS devices and remained dormant for weeks or months before stealing approximately $2.94 million, using lures such as fake Teams invitations and counterfeit Siri or Teams binaries. A separate Contagious Interview operation used a fake LinkedIn recruiter, a malicious Git-hook repository, and a video call to steal a wallet password, resulting in a $60,000 loss. The report also disclosed new and suspected UNC1069 lookalike infrastructure.

Indicators of Compromise

Type Value First Seen Last Seen
DOMAIN casesapple.com 2026-11-04 2026-11-04
DOMAIN assist-apple-id.com 2026-11-04 2026-11-04
DOMAIN team.lives.cn.com 2026-11-04 2026-11-04
DOMAIN meets.eu.com 2026-11-04 2026-11-04
DOMAIN live.teams.eu.com 2026-11-04 2026-11-04
DOMAIN web05.us 2026-11-04 2026-11-04
DOMAIN u04web.us 2026-11-04 2026-11-04
DOMAIN 04s.us 2026-11-04 2026-11-04
DOMAIN 03z.us 2026-11-04 2026-11-04
DOMAIN 03web.us 2026-11-04 2026-11-04
DOMAIN us06.cloud 2026-11-04 2026-11-04
DOMAIN us04.cloud 2026-11-04 2026-11-04
DOMAIN videoviewer.onlineus05.live 2026-11-04 2026-11-04
DOMAIN teamviacam.com 2026-11-04 2026-11-04
DOMAIN tearnsliues.com 2026-11-04 2026-11-04
DOMAIN teennsrniccosoft.com 2026-11-04 2026-11-04
DOMAIN teannsnisrocoft.com 2026-11-04 2026-11-04

Related Actors

Related Reports

« Back