Jessus. This just in and I think I "did it" and I might even apply fore the Rewards for Justice program second time in a row this time believe it or on North Korea's WMD program in terms of tracking down North Korean IT workers that appear to have launched massive domain farms and are actively recruiting in the field of developers and IT workers to build mobile applications and web sites where the amount at least according to the U.S Government goes to fund their WMD program.
In this analysis which I did in less than two hours time I'll expose the entire domain portfolio of North Korea's IT workers that are busy franchising across the glove potentially funding North Korea's WMD program at least according to the U.S Government and will offer in-depth peek inside their Internet-connected infrastructure.
hxxp://edenprogram.com
Team
Alex Banks
Anastasiia Belenok
Isaac Hunter
James Baker
Mark Rober
Mason Church
Tony Stewart
hxxp://github.com/Eden-programming
hxxp://github.com/tonyS2013
hxxp://github.com/mchurch21
hxxp://github.com/mark-rober21
hxxp://github.com/jbaker-git
hxxp://github.com/ishunter216
hxxp://github.com/Eden2016
hxxp://github.com/chris-bgit
hxxp://github.com/anastas-bel
hxxp://github.com/alexbgit80k
hxxp://dribbble.com/eden_software
hxxp://www.guru.com/freelancers/eden-programming-solutions
Team
Michael King
Nick Abbate
Tony Stewart
Claude Roberson
Tony Freeman
Dmitriy Anisimov
Samuel Agrebi
Ricardo Salazar
David Nash
Pedro Ortega
Stanislav Cherneha
hxxp://www.linkedin.com/in/michael-moore-682a51189
Sample photos include:
Related domains known to have been involved in the campaign include:
hxxp://kncw.or.kr/
hxxp://urbis.com.py/
hxxp://www.cijef.com/
hxxp://www.mcc-consulting.net/
hxxp://www.nanosoft.ae/
hxxp://www.nimble-apps.com/
hxxp://www.scarletsoftware.com/
hxxp://www.seglico.com/
hxxp://www.strate.ae/
hxxp://www.techsoftco.xyz/
hxxp://www.tekrazor.com/
hxxp://www.urbis.com.py/
hxxp://www.virtualwarein.com/
hxxp://advanzetech.com/
hxxp://akubohr.com/
hxxp://amsoftwarefactory.com/
hxxp://apncoders.com/
hxxp://avadhmicrosystem.in/
hxxp://bafv.suavilaser.es/
hxxp://blis4.co.nz/
hxxp://chamados.com.br/
hxxp://edenprogram.com/
hxxp://finnovion.com/
hxxp://ft3.group/
hxxp://fts77.ru/
hxxp://hasanitsolution.netlify.app/
hxxp://informatic.cl/
hxxp://letsoft.org/
hxxp://manin-hood.com/
hxxp://maps.google.com/
hxxp://mobicom.io/
hxxp://nanosoft.ae/
hxxp://opticosenriquehurtado.es/
hxxp://palmas.app/
hxxp://pbd.co.il/
hxxp://ponybelle.com/
hxxp://pro-codes.com/
hxxp://purpleqube.com/
hxxp://rlspencerroofing.com/
hxxp://springshare.com/
hxxp://support.google.com/
hxxp://template.wbs-dvp.pro/
hxxp://tiiastechsolutions.com/
hxxp://to-be-technology.fr/
hxxp://translate.google.com/
hxxp://trivamwebsolutions.com/
hxxp://tsv.mots.go.th/
hxxp://vyzkumne-infrastruktury-test.vm.cesnet.cz/
hxxp://www.4dbuilds.co.uk/
hxxp://www.advanzetech.com/
hxxp://www.asset.org.uk/
hxxp://www.calco.dk/
hxxp://www.chamados.com.br/
hxxp://www.crm-masters.pl/
hxxp://www.cybernaptics.mu/
hxxp://www.daslos-studios.com/
hxxp://www.easypages.url.tw/
hxxp://www.emaildoctor.org/
hxxp://www.indiamart.com/
hxxp://www.informatic.cl/
hxxp://www.leoconcept.de/
hxxp://www.netsupportsoftware.cl/
hxxp://www.olbericsolutions.com/
hxxp://www.purpleqube.com/
hxxp://www.rfcvela.com/
hxxp://www.royalbrokerage.net/
hxxp://www.sims.com.br/
hxxp://www.toshalinfotech.com/
hxxp://www.valueworkx.com/
hxxp://www.waynesolutionsinc.com/
hxxp://www.zwimbaengineering.com/
Related personally identifiable email address accounts known to have been involved in the campaign include:
afahmy[.]pro-codes.com
henrique.lambert[.]hotmail.com
saint5121[.]yahoo.com
fastbone[.]fastmail.net
itdoonsolutions[.]gmail.com
meetchristopher[.]gmail.com
t.oriol[.]salesclic.com
asauma[.]tekrazor.com
dev[.]nimble-apps.com
drshmk[.]msn.com
shuki4tal[.]gmail.com
t.oriol[.]nimble-apps.com
yoenis.pantoja[.]gmail.com
a.fahmy[.]windowslive.com
kncw[.]chol.com
asauma99[.]yahoo.com
ubiktime[.]gmail.com
t_oriol[.]yahoo.fr
trivamwebsolutions[.]gmail.com
afahmy[.]ymail.com
rodrigo.madrid.a[.]gmail.com
leogar07[.]gmail.com
caseraghi[.]gmail.com
Dinesh[.]INDIAMART.COM
amine.benabou[.]gmail.com
purplequbess[.]gmail.com
skiran.pulidindi[.]gmail.com
info[.]chinacapital.com
cassio[.]evolua.com.br
Related personally identifiable email address accounts known to have been involved in the campaign include:
careers[.]advanzetech.com
Global-HR[.]advanzetech.com
contact[.]advanzetech.com
info[.]akubohr.com
info[.]amsoftwarefactory.com
pathsoft-support[.]gmail.com
kottenator[.]gmail.com
avadhsoft[.]gmail.com
avadhmicrosystem[.]gmail.com
support[.]blis4.co.nz
suporte[.]chamados.com.br
hello[.]finnovion.com
support[.]finnovion.com
info[.]fts77.ru
ventas[.]informatic.cl
info[.]manin-hood.com
optica[.]opticosenriquehurtado.es
info[.]ponybelle.com
a.fahmy[.]windowslive.com
hello[.]purpleqube.com
info[.]rlspencerroofing.com
sales[.]springshare.com
info[.]springshare.com
support[.]springshare.com
asxvmprobertest[.]gmail.com
info[.]infinitetiias.com
contact[.]to-be-technology.fr
info[.]urbis.com.py
web[.]vyzkumne-infrastruktury.cz
kontakt[.]calco.dk
info[.]demolink.org
mail[.]demolink.org
cijef[.]cijef.com
office[.]crm-masters.pl
info[.]daslos-studios.com
support[.]emaildoctor.org
sales[.]emaildoctor.org
info[.]seglico.com
contacto[.]mcc-cons.com
contacto[.]mcc-consulting.net
sales[.]nanosoft.ae
info[.]nanosoftengineers.com
info[.]nanosoft.sg
info[.]midcoKuwait.com
info[.]facilitazis.com
enquiry[.]nanosoft.ae
info[.]olbericsolutions.com
info[.]federacioncanariadevela.org
Info[.]royalbrokerage.net
info[.]scarletsoftware.com
support[.]scarletsoftware.com
gabriel[.]seglico.com
contato[.]sims.com.br
corporate[.]strate.ae
job[.]strate.ae
privacy[.]strate.ae
sales[.]tekrazor.com
contactus[.]toshalinfotech.com
info[.]virtualwarein.com
contact[.]virtualwarein.com
customersuccess[.]waynesolutionsinc.com
support[.]waynesolutionsinc.com
privacy[.]demolink.org
duvida[.]chamados.com.br
comercial[.]chamados.com.br
problema[.]chamados.com.br
outros[.]chamados.com.br
dpo[.]evolua.com.br
suporte[.]evolua.com.br
info[.]maninhood.com
info[.]inetss.com
mail[.]demolimk.org
info[.]demolimk.org
privacy[.]springshare.com
jobs[.]springshare.com
Stay tuned!
The post Exposing North Korea’s IT Worker’s Eden Programming Solutions WMD-Funding IT Services and Solutions Franchise – An Overview appeared first on Security Boulevard.
Dancho Danchev
Source: Security Boulevard
Source Link: https://securityboulevard.com/2023/10/exposing-north-koreas-it-workers-eden-programming-solutions-wmd-funding-it-services-and-solutions-franchise-an-overview/