Trusted Design

TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure

概要

Internet Protocol (IP) addresses associated with a malware variant, known as DeltaCharlie, used to manage North Korea’s distributed denial-of-service (DDoS) botnet infrastructure. This alert contains indicators of compromise (IOCs), malware descriptions, network signatures, and host-based rules to help network defenders detect activity conducted by the North Korean government. The U.S. Government refers to the malicious cyber activity by the North Korean government as HIDDEN COBRA.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• TA17-164A - HIDDEN COBRA DDoS Botnet Infrastructure (score: 0.93)
• HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure (score: 0.93)
• TA17-164A: HIDDEN COBRA (score: 0.92)
• HIDDENCOBRA (score: 0.84)
• Hidden Cobra (score: 0.84)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る