@Ghostyak GhostYak
GhostYak posts on X about apt, #apt, servers, file the most. They currently have [--] followers and [--] posts still getting attention that total [-----] engagements in the last [--] hours.
Engagements: [-----] #
Mentions: [--] #
Followers: [--] #
CreatorRank: [---------] #
Social Influence
Social topic influence apt #305, #apt #78, servers, file, ai, comments, caught, agent, code, loop
Top Social Posts
Top posts by engagements in the last [--] hours
"#kimsuly #apt #dprk 2026-01-31 nood.nts-edoc-view.dns.navy 2026-01-24 www.com-mew.dynv6.net 2026-01-23 mld.com-mew.dynv6.net"
X Link 2026-01-31T04:45Z [--] followers, [--] engagements
"#Kimsuky #APT #DPRK #Phish 2026-01-31 mew.nts-edoc-view.dns.navy 2026-01-31 nood.nts-edoc-view.dns.navy 2026-01-24 www.com-mew.dynv6.net 2026-01-23 mld.com-mew.dynv6.net"
X Link 2026-02-01T00:02Z [--] followers, [--] engagements
"#APT #Kimsuky #DPRK 2026-02-05 claim.notice-lost112.n-e.kr"
X Link 2026-02-08T05:16Z [--] followers, [---] engagements
"2026-02-10 www.nid-tax.duckdns.org 2026-02-10 www.nt-book.duckdns.org 2026-02-10 www.vemt.duckdns.org 2026-02-10 vemt.duckdns.org #kimsuky #apt #dprk"
X Link 2026-02-10T22:59Z [--] followers, [---] engagements
"2026-02-16 #Kimsuky #APT #DPRK https://www.shodan.io/host/27.102.138.152 https://www.shodan.io/host/27.102.138.152"
X Link 2026-02-16T03:57Z [--] followers, [----] engagements
"27.102.138.150 #kimsuky #apt #dprk"
X Link 2026-02-13T22:35Z [--] followers, [--] engagements
"2026-02-12 nida.nts-edoced.dns.army 2026-02-12 nid-login.nts-edoced.dns.army 2026-02-12 nav-logins.nts-edoced.dns.army 2026-02-12 nav-logins.ipsmas.dns.army 2026-02-12 nida.ipsmas.dns.army #kimsuky #apt #dprk"
X Link 2026-02-13T01:11Z [--] followers, [---] engagements
"2026-02-14 www.gen-ker.dynv6.net 2026-02-14 gen-ker.dynv6.net 2026-02-12 fd6we5.dns.army 2026-02-11 asdfs432.dns.navy #kimsuky #apt #DPRK"
X Link 2026-02-14T23:58Z [--] followers, [---] engagements
"2026-02-17 #Kimsuky #APT #DPRK https://www.shodan.io/host/152.32.138.225 https://www.shodan.io/host/152.32.138.225"
X Link 2026-02-17T01:31Z [--] followers, [---] engagements
"2026-02-18 #Kimsuky #APT #DPRK https://www.shodan.io/host/38.60.220.30 https://www.shodan.io/host/38.60.220.30"
X Link 2026-02-18T03:53Z [--] followers, [---] engagements
"Servers are growing fast"
X Link 2026-02-18T03:53Z [--] followers, [--] engagements
"#Kimsuky #APT #DPRK https://www.shodan.io/host/38.60.220.157 https://www.shodan.io/host/38.60.220.157"
X Link 2026-02-17T08:47Z [--] followers, [---] engagements
"2026-02-17 #Kimsuky #APT #DPRK https://www.shodan.io/host/152.32.138.225 https://www.shodan.io/host/152.32.138.225"
X Link 2026-02-17T01:31Z [--] followers, [---] engagements
"2026-02-14 epsdocgoji.mydns.bz 2026-02-14 edoc.ntprefdoc.mydns.bz 2026-02-13 www.docrequireaccess.mydns.bz 2026-02-13 doc.docrequireaccess.mydns.bz"
X Link 2026-02-17T02:45Z [--] followers, [---] engagements
"2026-02-16 #Kimsuky #APT #DPRK https://www.shodan.io/host/27.102.138.152 https://www.shodan.io/host/27.102.138.152"
X Link 2026-02-16T03:57Z [--] followers, [----] engagements
"Interesting ZIP file looks like #Kimsuky sample inside @abuse_ch @skocherhan @lazarusholic https://bazaar.abuse.ch/sample/10a1a22c67abc0afccf373e05d11a29a613b287347d55e07597016ce0905420d/ https://bazaar.abuse.ch/sample/10a1a22c67abc0afccf373e05d11a29a613b287347d55e07597016ce0905420d/"
X Link 2026-02-14T16:40Z [----] followers, [---] engagements
"2026-02-14 www.gen-ker.dynv6.net 2026-02-14 gen-ker.dynv6.net 2026-02-12 fd6we5.dns.army 2026-02-11 asdfs432.dns.navy #kimsuky #apt #DPRK"
X Link 2026-02-14T23:58Z [--] followers, [---] engagements
"Lazarus is running their payloads through an AI #agent to dodge our detections. The giveaway Neatly numbered comments "Optimized XOR loop" labels and original code left beside AI-suggested rewrites. A for effort. Still caught. #Lazarus #APT #ThreatIntel"
X Link 2026-02-13T16:39Z [----] followers, [----] engagements
"27.102.138.150 #kimsuky #apt #dprk"
X Link 2026-02-13T22:35Z [--] followers, [--] engagements
"It is started now again"
X Link 2026-02-14T01:06Z [--] followers, [--] engagements
"#Kimsuky #DPRK bd96da12b988c6860c5f3f9512e9e1211945fe6c 27.102.138.45 27.102.138.49 27.102.137.32 AS45996 DAOU TECHNOLOGY"
X Link 2026-02-13T13:38Z 26.2K followers, [----] engagements
"2026-02-12 nida.nts-edoced.dns.army 2026-02-12 nid-login.nts-edoced.dns.army 2026-02-12 nav-logins.nts-edoced.dns.army 2026-02-12 nav-logins.ipsmas.dns.army 2026-02-12 nida.ipsmas.dns.army #kimsuky #apt #dprk"
X Link 2026-02-13T01:11Z [--] followers, [---] engagements
"2026-02-10 www.nid-tax.duckdns.org 2026-02-10 www.nt-book.duckdns.org 2026-02-10 www.vemt.duckdns.org 2026-02-10 vemt.duckdns.org #kimsuky #apt #dprk"
X Link 2026-02-10T22:59Z [--] followers, [---] engagements
"#APT #Kimsuky #DPRK 2026-02-05 claim.notice-lost112.n-e.kr"
X Link 2026-02-08T05:16Z [--] followers, [---] engagements
"#APT #Kimsuky #DPRK 2026-02-05 load.nist-verification.kro.kr"
X Link 2026-02-06T07:34Z [--] followers, [---] engagements
"().lnk e43beb8b3584d1d6b78c4ece0d88037d6183914f4b0ca615839a6dc7b8a41fea *schtasks name : "Goaglechrome" *schtasks name : "GoaglechromeUpdate" #APT #DPRK #HyperNotePad #Kimsuky"
X Link 2026-01-26T08:24Z [----] followers, [----] engagements
"Hunting #Lazarus Part IV: Real Blood on the Wire Part IV: Part III: Part II: Part I: https://redasgard.com/blog/hunting-lazarus-contagious-interview-c2-infrastructure https://redasgard.com/blog/hunting-lazarus-part2-blockchain-dead-drop https://redasgard.com/blog/hunting-lazarus-part3-infrastructure-too-perfect https://redasgard.com/blog/hunting-lazarus-part4-real-blood-on-the-wire https://redasgard.com/blog/hunting-lazarus-contagious-interview-c2-infrastructure https://redasgard.com/blog/hunting-lazarus-part2-blockchain-dead-drop"
X Link 2026-02-05T03:37Z 39.7K followers, [----] engagements
Limited data mode. Full metrics available with subscription: lunarcrush.com/pricing