85.239.62.36

IP Address

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

April 21, 2026

Last Seen

April 22, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Listed as potential C2 server for Void Dokkaebi

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 4

Sandbox · 2

Infrastructure · 3

Malware trackers · 1

Web search · 2

Related Clusters (1)

Void Dokkaebi's Malware Campaign Exploits Developer Repositories via Fake Job Interviews

Apr 22·22 sources

Related Articles (2)

Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories

Trendmicro·Apr 22

Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories

Trendmicro·Apr 21

Related Entities

FAMOUS CHOLLIMA Void Dokkaebi Malware Supply Chain Attack Worm North Korea CWE-94 - Code Injection Dev#popper RAT BeaverTail InvisibleFerret OmniStealer OtterCookie