SEAL weekly stats: 28 Oct - 3 Nov 2026
2026-11-04 • Security Alliance •
https://radar.securityalliance.org/seal-weekly-stats-28-oct-3-nov-2026
SEAL recorded four DPRK incidents causing $3 million in losses, excluding the separately disclosed Binance incident. Three UNC1069 operations compromised macOS devices and remained dormant for weeks or months before stealing approximately $2.94 million, using lures such as fake Teams invitations and counterfeit Siri or Teams binaries. A separate Contagious Interview operation used a fake LinkedIn recruiter, a malicious Git-hook repository, and a video call to steal a wallet password, resulting in a $60,000 loss. The report also disclosed new and suspected UNC1069 lookalike infrastructure.
Indicators of Compromise
| Type | Value | First Seen | Last Seen |
|---|---|---|---|
| DOMAIN | casesapple.com | 2026-11-04 | 2026-11-04 |
| DOMAIN | assist-apple-id.com | 2026-11-04 | 2026-11-04 |
| DOMAIN | team.lives.cn.com | 2026-11-04 | 2026-11-04 |
| DOMAIN | meets.eu.com | 2026-11-04 | 2026-11-04 |
| DOMAIN | live.teams.eu.com | 2026-11-04 | 2026-11-04 |
| DOMAIN | web05.us | 2026-11-04 | 2026-11-04 |
| DOMAIN | u04web.us | 2026-11-04 | 2026-11-04 |
| DOMAIN | 04s.us | 2026-11-04 | 2026-11-04 |
| DOMAIN | 03z.us | 2026-11-04 | 2026-11-04 |
| DOMAIN | 03web.us | 2026-11-04 | 2026-11-04 |
| DOMAIN | us06.cloud | 2026-11-04 | 2026-11-04 |
| DOMAIN | us04.cloud | 2026-11-04 | 2026-11-04 |
| DOMAIN | videoviewer.onlineus05.live | 2026-11-04 | 2026-11-04 |
| DOMAIN | teamviacam.com | 2026-11-04 | 2026-11-04 |
| DOMAIN | tearnsliues.com | 2026-11-04 | 2026-11-04 |
| DOMAIN | teennsrniccosoft.com | 2026-11-04 | 2026-11-04 |
| DOMAIN | teannsnisrocoft.com | 2026-11-04 | 2026-11-04 |