{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/infostealer-infection-unmasks-dprk-operative-behind-polyfill-io-supply-chain-attack-and-us-crypto-exchange-infiltration/",
    "fang": "live",
    "exported_at": "2026-07-15T22:32:06Z",
    "total": 33,
    "categories": 3
  },
  "iocs": {
    "IPv4": [
      "192.161.60.132"
    ],
    "Domains": [
      "Gate.io",
      "Gate.us",
      "Polyfill.io",
      "apps.nulab.com",
      "cctest.kk5yuzmev2qbgulz.com",
      "cockpit.sumsub.com",
      "discord.com",
      "feee.io",
      "friday.stark-industries.solutions",
      "gy4q3fpx3gh77gw.kk5yuzmev2qbgulz.com",
      "kk5yuzmev2qbgulz.com",
      "lrtechs.backlog.com",
      "lrtechs.co",
      "lrtechs.co.jp",
      "polyfill.com",
      "polyfill.io",
      "polyfillcache.com",
      "stark-industries.solutions",
      "t2.funnull.host",
      "vision.stark-industries.solutions",
      "www.hudsonrock.com",
      "www.mediafire.com"
    ],
    "URLs": [
      "funnull.host",
      "https://apps.nulab.com/signup/verify",
      "https://cockpit.sumsub.com/checkus#/applicant/66a453df5137ba3da8742f58/basicInfo?clientId=gate.us_60664",
      "https://discord.com/register",
      "https://gy4q3fpx3gh77gw.kk5yuzmev2qbgulz.com/#/domin/list",
      "https://lrtechs.backlog.com/dashboard",
      "https://vision.stark-industries.solutions/auth/login",
      "https://www.hudsonrock.com/schedule-demo",
      "https://www.mediafire.com/file/gflsp6ovigjnvms/@#Full_Istaller_Pc_Setup_2024_PaSSW%E1%B9%8FrD^$.zip/file",
      "kk5yuzmev2qbgulz.com"
    ]
  }
}