[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxxgkVeQl_buTPe6CEe_EfvbZvE8wsj1Cgo_uKiEd9iM":3},{"article":4,"iocs":36},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":21,"category":22,"article_tags":25},"371d8ff3-8442-42ed-9c4f-e8542d5ebc13","lab99[.]sbs\nRelated C2 IP: 216.126.225[.]243\nPossible used by some North Korean actors...\n🤷‍♂️ h...","lab99-sbs-related-c2-ip-216-126-225-243-possible-used-by-some-north-korean-actor-037f31","lab99[.]sbs\nRelated C2 IP: 216.126.225[.]243\nPossible used by some North Korean actors...\n🤷‍♂️ https:\u002F\u002Ft.co\u002FIRSsHklDXU","A new command and control (C2) domain, lab99[.]sbs, has been identified, associated with the IP address 216.126.225[.]243. This infrastructure is suspected to be utilized by North Korean threat actors.","New C2 domain lab99[.]sbs observed with associated IP 216.126.225[.]243.",null,"https:\u002F\u002Fx.com\u002Fmalwrhunterteam\u002Fstatus\u002F2064325045938274373","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHKX0CRXWwAA6OTY.png","2026-06-09T12:33:38+00:00","2026-06-09T13:00:07.423365+00:00",7,[18],{"name":19,"type":20},"North Korean actors","threat_actor","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":21,"icon":11,"name":23,"slug":24},"Threat Intelligence","threat-intelligence",[26,31],{"category":27},{"id":28,"icon":11,"name":29,"slug":30},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":32},{"id":33,"icon":11,"name":34,"slug":35},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",[37,41],{"type":38,"value":39,"context":40},"domain","lab99.sbs","Command and Control (C2) domain",{"type":42,"value":43,"context":44},"ip","216.126.225.243","Associated IP address for C2 infrastructure"]