Threat IntelligenceJun 9, 2026
lab99[.]sbs Related C2 IP: 216.126.225[.]243 Possible used by some North Korean actors... š¤·āāļø h...
New C2 domain lab99[.]sbs observed with associated IP 216.126.225[.]243.
Summary
A new command and control (C2) domain, lab99[.]sbs, has been identified, associated with the IP address 216.126.225[.]243. This infrastructure is suspected to be utilized by North Korean threat actors.
Indicators of Compromise
- domain ā lab99.sbs
- ip ā 216.126.225.243
Entities
North Korean actors (threat_actor)