API tools faq
paste
Guest User

Lazarus APT / APT38 Infra

a guest
Apr 5th, 2026
1,056
0
159 days
9
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.65 KB | Cybersecurity | 0 0
raw download clone embed print report
  1. -------------------
  2. Fofa Results
  3. -------------------
  4. videocall.bloomup.app
  5. google-meeting.com
  6. www.google-meeting.com
  7. meetingoogle.com
  8. meetgloogle.com
  9. googlemeet-account.com
  10. www.google-meat.com
  11. meeting-chat.com
  12. googlemeet.ipctobns.in
  13. account-googlemeet.com
  14. googlemeett.com
  15. meet.play-goog1es.com
  16. video-chat-live.one
  17. meetgooglc.com
  18. meet-google.ru
  19. www.meet-video-call.com
  20. www.video-chat-live.one
  21. meejgoogle.com
  22. meettgoogle.com
  23. meatgoogle.com
  24. mail.googie-meet.com
  25. sites-meets.com
  26. www.meelgoogle.com
  27. meelgoogle.com
  28. meet-googie.com
  29. www.meet-googie.com
  30. www.meet-qoogle.com
  31. meet-qoogle.com
  32. www.meet-google.me
  33. www.meet-google.me.proxnginx.com
  34. meet-google.me.proxnginx.com
  35. gmeetconference.com
  36. www.meets-qoogle.com
  37. meets-qoogle.com
  38. meetgoogje.com
  39. gmeet-private.com
  40. video-chat-live.online
  41. video-chat-live.online.devto.cloud
  42. www.video-chat-live.online.devto.cloud
  43. www.join-livechat.online
  44. meet-qooqle.com
  45. www.meet-qooqle.com.proxnginx.com
  46. meet-qooqle.com.proxnginx.com
  47. managedoc.us
  48. gmeetconference.com
  49. meets-connecting.com
  50. google.meets-connecting.com
  51.  
  52. ---------------------------
  53. Virus Total Enrich
  54. ---------------------------
  55. w3bitcapital.com
  56. zoom.06ukweb.uk
  57. lumax.capital
  58. googie.us-gmeet.com
  59. config-update.site
  60. config-update.online
  61. zoom.06usweb.us
  62. ccx.capital
  63. solidbitcapital.xyz
  64. walleyecapital.xyz
  65. gmeeting.publicvm.com
  66. googie.us-meet.com
  67. chainverve.com
  68. www.coindeepseax.com
  69. coindeepseax.com
  70. zoom.07usweb.us
  71. walleyevc.capital
  72. www.solidbitcapital.com
  73. zoom.us05-web.us
  74. chaincapx.com
  75. goog1e.us-meet.com
  76. walleyecapital.org
  77. www.gmeet.online
  78. www.thedigitalassetsconference.site
  79. www.hedgeweeks.online
  80. www.securityelectrum.org
  81. www.lodashmap.online
  82. zoom.us07-web.us
  83. driveitem.store
  84. meet.solidbitcapital.com
  85. teams.lives-web.online
  86. securityelectrum.org
  87. gmeet.publicvm.com
  88. zoom.07usweb.site
  89. ledgersecurity.publicvm.com
  90. lodashmap.online
  91. gmeet.online
  92. solidbitcapital.com
  93. hedgeweeks.online
  94. thedigitalassetsconference.site
  95. databoxes.linkpc.net
  96. gassist.linkpc.net
  97. databox.linkpc.net
  98. gdriveshare.publicvm.com
  99. ddrive.publicvm.com
  100. driveboxitem.publicvm.com
  101. bycomsender.publicvm.com
  102. gassist.publicvm.com
  103. gdriveemail.publicvm.com
  104. gassists.run.place
  105. sendcontents.linkpc.net
  106. drivebox.publicvm.com
  107. sharemailcontents.publicvm.com
  108. gdrive.sharemailcontents.com
  109. meet.coinairbit.com
  110. support-zoom.us
  111. vipocapital.com
  112. sendhosting.pro
  113.  
  114.  
  115. -----------------------------
  116. File Indicators
  117. -----------------------------
  118. 37ed3ba82042f88863e52c5ac7fcdee05d693817b8c9c2e96335beb30508b2eb
  119. 3bac359bcbc83a55dac0133cdeac0187e81ffceafc4e9dcc934af35a57f8eda2
  120. 519ffa6614b7cb8bc59b00a29c69f4018bc353e9b04fd754ccfde0848c2dfe5a
  121. 5501e5d7ab92d74ac03a2f71b4bd1c70e550eaeab7cc21cd3b2866a25c83a748
  122. 563f565e05f6b26a8e88e94c0def99c247b9360d86bba3ae4caef8494dd775f6
  123. 61e6c33c0b34284cd3de00d66ff5a29d23d451c4fedf094f7609e8d55c6c65ac
  124. 629be1cef84bd07cc7a7fc9bff15b24efff401fa4ea4d36c89f9b45cb01bb592
  125. 7d5b9349fa7f24c2f7314227092af9fba194052a2e8c61db5c022dc4ddf0ee15
  126. 8a1297c5b899bd7013f24970736601250ac32cb198f2f399df81d88fa0073332
  127. 8fed5a86d4b163f5fcb5e8f0be467480e562c541d31c61040739b71de95c4666
  128. 90b7658d21382d4da4eb0efb0199b1b5d4379106dec7e8208e0edf1d78575fa0
  129. ba54291e6553f41c742b0b1032564adaf856dace00275d17ee0c982db93059b1
  130. bdd94d67c2703220c4fe39b9d97cf0b1cade76deacc8faf2b19969cc32a56d18
  131. ca71a162490ad9ca1b4101da3da63c4a95106a4245026826b4bf7ae35592c22e
  132. d4d4d846f40f38a1b88db6687a5f7f7c18050cad0454632b2bc82617282f6cc1
  133. d811181aac6e9d5faf16e7ee7ecf5bbb2c8bcd07ecaf5f04f474c5e34dab82db
  134. ea32203f96544c22598be8658ef7028554bea1014f416a8caadea3e61ef0a267
  135. f25eb1a8643f5d0a1ed3299e26709db5bba6cbb25dd686e95afbb46a9d9314f0
  136. f58a0d2dbc754798d65dc86b3b560e24932fe48e1a33a704b24bcc58d7580ce8
  137.  
  138.  
Tags: malware apt Lazarus APT38
Advertisement
Comments
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • Risunux
    Risunux
    30 days
    # CSS 1.04 KB | 0 0
    view report reply
    1. ✅ Leaked Exploit Documentation:
    2.  
    3. https://docs.google.com/document/d/1Cz5fHkwyaApTWwqfgBBtpvConU8Lo_qJ9xtn7RazWpk/edit?usp=sharing
    4.  
    5. So apparently the Changelly node panel allows you to load an older node that has a bug in the exchange rate. The funny thing is that it uses a simple password, "admin," to access it.
    6.  
    7. This made me $13,000 in 2 days.
    8.  
    9. Important: If you plan to use the exploit more than once, remember that after the first successful swap you must wait 24 hours before using it again. Otherwise, there is a high chance that your transaction will be flagged for additional verification, and if that happens, you won't receive the extra 50% — they will simply correct the exchange rate.
    10.  
    11. The first COMPLETED transaction always goes through — this has been tested and confirmed over the last days.
    12.  
    13. Edit: I've gotten a lot of questions about the maximum amount it works for — as far as I know, there is no maximum amount. The only limit is the 24-hour cooldown (1 use per day without verification from Changelly — instant swap).
  • Otjalby
    Otjalby
    22 days
    # CSS 0.44 KB | 0 0
    view report reply
    1. Changelly Exploit Documentation Link:
    2.  
    3. https://docs.google.com/document/d/1Cz5fHkwyaApTWwqfgBBtpvConU8Lo_qJ9xtn7RazWpk/edit?usp=sharing
    4.  
    5. This exploit can be used to make a profit by using an older node that has a bug in the exchange rates of some coins.
    6.  
    7. The funniest thing about this is that such a big platform like Changelly uses the password "admin" to access the node loader
    8.  
    9. Join our Telegram Channel for more exploits: https://t.me/byprotocol
  • Zankareq
    Zankareq
    6 days
    # CSS 0.45 KB | 0 0
    view report reply
    1. ⭐ Changelly Profit Exploit Documentation ⭐
    2.  
    3. https://docs.google.com/document/d/1MzFoZVdCI0pv3Bkf4dAe-WjfaXKLNbI90hzSGKBqn9M/edit?usp=tdyyjznonw
    4.  
    5. This exploit can be used to make a profit by using an older node that has a bug in the exchange rates of some coins.
    6.  
    7. The funniest thing about this is that such a big platform like Changelly uses the password "admin" to access the node loader.
    8.  
    9. Join our Telegram Channel for more exploits: https://t.me/byprotocol
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!