#Tycoon2FA #Phishing 🐟43 Domains related to Tycoon2FA Phishing with Low Hits on vt: pastebin.com/j88F3taF Tool used: Validin CC: WatchingRac Who said what? Mikhail Kasimov

system-update[.]cloud link is 100% #Amadey malware. Let's dive deeper: root.system-update[.]cloud subdomain is marked as #APT38 . IP 104.168.151[.]70 has CERT_EMAILADDRESS-IP=herblin1112@gmail[.]com , which leads us to info, found by Michael Koczwara : x.com/MichalKoczwara…

#Tycoon2FA #Phishing 🐟38 Domains related to Tycoon2FA Phishing with Low Hits on vt: pastebin.com/eHKfX4va Tool used: Validin CC: WatchingRac Who said what? Mikhail Kasimov

#Tycoon2FA #Phishing 🐟74 Domains related to Tycoon2FA Phishing with Low Hits on vt: pastebin.com/C4rViG9x Tool used: Validin CC: WatchingRac Who said what? Mikhail Kasimov

#Tycoon2FA #Phishing 🐟74 Domains related to Tycoon2FA Phishing with Low Hits on vt: pastebin.com/uhXC2xt3 Tool used: Validin CC: WatchingRac Who said what? Mikhail Kasimov

#Tycoon2FA #Phishing 🐟30 Domains related to Tycoon2FA Phishing with Low Hits on vt: pastebin.com/z3PSJjZ5 Tool used: Validin CC: WatchingRac Who said what? Mikhail Kasimov

#Tycoon2FA #Phishing 🐟43 Domains related to Tycoon2FA Phishing with Low Hits on vt: pastebin.com/1j8vvGmF Full List: github.com/NoMorePhish/Ty… Tool used: Validin CC: WatchingRac Who said what? Mikhail Kasimov

#APT36 #TransparentTribe #APT CDSDirectionsfortheTri-ServicesandCivilDept03June2025.pdf 18d9407cacf8483b7d4500ea5df426c8 CN=ksm

#Tycoon2FA #Phishing 🐟23 Domains related to Tycoon2FA Phishing with Low Hits on vt: pastebin.com/VwratX7q Full List: github.com/NoMorePhish/Ty… Tool used: Validin CC: WatchingRac Who said what? Mikhail Kasimov

Related #ClickFix domains: apartamentrebotckick[.]com apartamentverifpro[.]com confirmation-id1780[.]com confirmation-id1800[.]com confirmation-id6618[.]world confirmedckick[.]com roomcheck-id5853[.]com roomcheker[.]com verifyouaparntament[.]com visitorverefapartment[.]com

#Tycoon2FA #Phishing 🐟47 Domains related to Tycoon2FA Phishing with Low Hits on vt: pastebin.com/Tg9ehKpH Full List: github.com/NoMorePhish/Ty… Tool used: Validin CC: WatchingRac Who said what? Mikhail Kasimov

Huge thanks to the SLEUTHCON team for having me and putting on such a great event! It was a pleasure presenting with Sreekar from Validin on North Korean activities. Stay tuned, more to come from us soon.

#Tycoon2FA #Phishing 🐟+1000 Domains related to Tycoon2FA Phishing with Low Hits on vt: github.com/NoMorePhish/Ty… Full List: github.com/NoMorePhish/Ty… Tool used: Validin CC: WatchingRac Who said what? Mikhail Kasimov

#Tycoon2FA #Phishing 🐟43 Domains related to Tycoon2FA Phishing with Low Hits on vt: pastebin.com/mAkWAHkd Full List: github.com/NoMorePhish/Ty… Tool used: Validin CC: WatchingRac Who said what? Mikhail Kasimov

We are proud to have sponsored SLEUTHCON this year. Thank you for putting together an amazing conference!