Jessus. This just in and I think I “did it” and I might even apply fore the Rewards for Justice program second time in a row this time believe it or on North Korea’s WMD program in terms of tracking down North Korean IT workers that appear to have launched massive domain farms and are actively recruiting in the field of developers and IT workers to build mobile applications and web sites where the amount at least according to the U.S Government goes to fund their WMD program.

In this analysis which I did in less than two hours time I’ll expose the entire domain portfolio of North Korea’s IT workers that are busy franchising across the glove potentially funding North Korea’s WMD program at least according to the U.S Government and will offer in-depth peek inside their Internet-connected infrastructure.

hxxp://edenprogram.com

[email protected]

[email protected]

Team

Alex Banks

Anastasiia Belenok

Isaac Hunter

James Baker

Mark Rober

Mason Church

Tony Stewart

hxxp://github.com/Eden-programming

hxxp://github.com/tonyS2013

hxxp://github.com/mchurch21

hxxp://github.com/mark-rober21

hxxp://github.com/jbaker-git

hxxp://github.com/ishunter216

hxxp://github.com/Eden2016

hxxp://github.com/chris-bgit

hxxp://github.com/anastas-bel

hxxp://github.com/alexbgit80k

hxxp://dribbble.com/eden_software

hxxp://www.guru.com/freelancers/eden-programming-solutions

Team

Michael King

Nick Abbate

Tony Stewart

Claude Roberson

Tony Freeman

Dmitriy Anisimov

Samuel Agrebi

Ricardo Salazar

David Nash

Pedro Ortega

Stanislav Cherneha

hxxp://www.linkedin.com/in/michael-moore-682a51189

Sample photos include:

Related domains known to have been involved in the campaign include:

hxxp://kncw.or.kr/

hxxp://urbis.com.py/

hxxp://www.cijef.com/

hxxp://www.mcc-consulting.net/

hxxp://www.nanosoft.ae/

hxxp://www.nimble-apps.com/

hxxp://www.scarletsoftware.com/

hxxp://www.seglico.com/

hxxp://www.strate.ae/

hxxp://www.techsoftco.xyz/

hxxp://www.tekrazor.com/

hxxp://www.urbis.com.py/

hxxp://www.virtualwarein.com/

hxxp://advanzetech.com/

hxxp://akubohr.com/

hxxp://amsoftwarefactory.com/

hxxp://apncoders.com/

hxxp://avadhmicrosystem.in/

hxxp://bafv.suavilaser.es/

hxxp://blis4.co.nz/

hxxp://chamados.com.br/

hxxp://edenprogram.com/

hxxp://finnovion.com/

hxxp://ft3.group/

hxxp://fts77.ru/

hxxp://hasanitsolution.netlify.app/

hxxp://informatic.cl/

hxxp://letsoft.org/

hxxp://manin-hood.com/

hxxp://maps.google.com/

hxxp://mobicom.io/

hxxp://nanosoft.ae/

hxxp://opticosenriquehurtado.es/

hxxp://palmas.app/

hxxp://pbd.co.il/

hxxp://ponybelle.com/

hxxp://pro-codes.com/

hxxp://purpleqube.com/

hxxp://rlspencerroofing.com/

hxxp://springshare.com/

hxxp://support.google.com/

hxxp://template.wbs-dvp.pro/

hxxp://tiiastechsolutions.com/

hxxp://to-be-technology.fr/

hxxp://translate.google.com/

hxxp://trivamwebsolutions.com/

hxxp://tsv.mots.go.th/

hxxp://vyzkumne-infrastruktury-test.vm.cesnet.cz/

hxxp://www.4dbuilds.co.uk/

hxxp://www.advanzetech.com/

hxxp://www.asset.org.uk/

hxxp://www.calco.dk/

hxxp://www.chamados.com.br/

hxxp://www.crm-masters.pl/

hxxp://www.cybernaptics.mu/

hxxp://www.daslos-studios.com/

hxxp://www.easypages.url.tw/

hxxp://www.emaildoctor.org/

hxxp://www.indiamart.com/

hxxp://www.informatic.cl/

hxxp://www.leoconcept.de/

hxxp://www.netsupportsoftware.cl/

hxxp://www.olbericsolutions.com/

hxxp://www.purpleqube.com/

hxxp://www.rfcvela.com/

hxxp://www.royalbrokerage.net/

hxxp://www.sims.com.br/

hxxp://www.toshalinfotech.com/

hxxp://www.valueworkx.com/

hxxp://www.waynesolutionsinc.com/

hxxp://www.zwimbaengineering.com/

Related personally identifiable email address accounts known to have been involved in the campaign include:

afahmy[.]pro-codes.com

henrique.lambert[.]hotmail.com

saint5121[.]yahoo.com

fastbone[.]fastmail.net

itdoonsolutions[.]gmail.com

meetchristopher[.]gmail.com

t.oriol[.]salesclic.com

asauma[.]tekrazor.com

dev[.]nimble-apps.com

drshmk[.]msn.com

shuki4tal[.]gmail.com

t.oriol[.]nimble-apps.com

yoenis.pantoja[.]gmail.com

a.fahmy[.]windowslive.com

kncw[.]chol.com

asauma99[.]yahoo.com

ubiktime[.]gmail.com

t_oriol[.]yahoo.fr

trivamwebsolutions[.]gmail.com

afahmy[.]ymail.com

rodrigo.madrid.a[.]gmail.com

leogar07[.]gmail.com

caseraghi[.]gmail.com

Dinesh[.]INDIAMART.COM

amine.benabou[.]gmail.com

purplequbess[.]gmail.com

skiran.pulidindi[.]gmail.com

info[.]chinacapital.com

cassio[.]evolua.com.br

Related personally identifiable email address accounts known to have been involved in the campaign include:

careers[.]advanzetech.com

Global-HR[.]advanzetech.com

contact[.]advanzetech.com

info[.]akubohr.com

info[.]amsoftwarefactory.com

pathsoft-support[.]gmail.com

kottenator[.]gmail.com

avadhsoft[.]gmail.com

avadhmicrosystem[.]gmail.com

support[.]blis4.co.nz

suporte[.]chamados.com.br

hello[.]finnovion.com

support[.]finnovion.com

info[.]fts77.ru

ventas[.]informatic.cl

info[.]manin-hood.com

optica[.]opticosenriquehurtado.es

info[.]ponybelle.com

a.fahmy[.]windowslive.com

hello[.]purpleqube.com

info[.]rlspencerroofing.com

sales[.]springshare.com

info[.]springshare.com

support[.]springshare.com

asxvmprobertest[.]gmail.com

info[.]infinitetiias.com

contact[.]to-be-technology.fr

info[.]urbis.com.py

web[.]vyzkumne-infrastruktury.cz

kontakt[.]calco.dk

info[.]demolink.org

mail[.]demolink.org

cijef[.]cijef.com

office[.]crm-masters.pl

info[.]daslos-studios.com

support[.]emaildoctor.org

sales[.]emaildoctor.org

info[.]seglico.com

contacto[.]mcc-cons.com

contacto[.]mcc-consulting.net

sales[.]nanosoft.ae

info[.]nanosoftengineers.com

info[.]nanosoft.sg

info[.]midcoKuwait.com

info[.]facilitazis.com

enquiry[.]nanosoft.ae

info[.]olbericsolutions.com

info[.]federacioncanariadevela.org

Info[.]royalbrokerage.net

info[.]scarletsoftware.com

support[.]scarletsoftware.com

gabriel[.]seglico.com

contato[.]sims.com.br

corporate[.]strate.ae

job[.]strate.ae

privacy[.]strate.ae

sales[.]tekrazor.com

contactus[.]toshalinfotech.com

info[.]virtualwarein.com

contact[.]virtualwarein.com

customersuccess[.]waynesolutionsinc.com

support[.]waynesolutionsinc.com

privacy[.]demolink.org

duvida[.]chamados.com.br

comercial[.]chamados.com.br

problema[.]chamados.com.br

outros[.]chamados.com.br

dpo[.]evolua.com.br

suporte[.]evolua.com.br

info[.]maninhood.com

info[.]inetss.com

mail[.]demolimk.org

info[.]demolimk.org

privacy[.]springshare.com

jobs[.]springshare.com

Stay tuned!

*** This is a Security Bloggers Network syndicated blog from Dancho Danchev's Blog authored by Dancho Danchev. Read the original post at: https://ddanchev.blogspot.com/2023/10/exposing-north-koreas-it-workers-eden.html