🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

system-update[.]cloud link is 100% #Amadey malware. Let's dive deeper: root.system-update[.]cloud subdomain is marked as #APT38 . IP 104.168.151[.]70 has CERT_EMAILADDRESS-IP=herblin1112@gmail[.]com , which leads us to info, found by Michael Koczwara : x.com/MichalKoczwara…

#APT36 #TransparentTribe #APT CDSDirectionsfortheTri-ServicesandCivilDept03June2025.pdf 18d9407cacf8483b7d4500ea5df426c8 CN=ksm

Related #ClickFix domains: apartamentrebotckick[.]com apartamentverifpro[.]com confirmation-id1780[.]com confirmation-id1800[.]com confirmation-id6618[.]world confirmedckick[.]com roomcheck-id5853[.]com roomcheker[.]com verifyouaparntament[.]com visitorverefapartment[.]com

Huge thanks to the SLEUTHCON team for having me and putting on such a great event! It was a pleasure presenting with Sreekar from Validin on North Korean activities. Stay tuned, more to come from us soon.

We are proud to have sponsored SLEUTHCON this year. Thank you for putting together an amazing conference!