New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
On AS402425
averagedatahoarder
Member
in Security
https://x.com/DougMadory/status/2118786206356083078
From this tweet:
PSA: If your company is peering with Qorexa Labs (AS402425), you should de-peer as soon as possible.
Qorexa is believed to be a front for North Korea's 'Moonstone Sleet' hacking group, and has engaged in BGP hijacking and traffic manipulation on multiple occasions in 2026.
Minutes after this tweet, AS402425 disappeared from the global routing table.
2.27.171.0/24 is now originated by AS401152 (Ace Data Centers).
(2:22 PM ET = 19:22 UTC)
Disclaimer: have not verified the information in this tweet myself, but author seems relatively reputable. But am curious to hear people's opinions?
Comments
They do be getting credit a lot lately. Wonder if anyone tried the North Koreans destroyed my homework yet.
Surely for foodtech homework, at least? "The North Koreans defrosted my fridge and messed up my homework!"