Tag: domain registration

4 Attack Reports | 0 Vulnerabilities

Attack reports

330 custom email domains, and what this tells us about how attackers build infrastructure for fake account creation

A large-scale fake account creation campaign was detected and blocked, involving tens of thousands of attempted registrations using bots. The attackers employed a modified Chrome browser with anti-detect techniques like canvas randomization. The campaign stood out due to the use of 330 unique custo…
domain registration
2025-11-18
anti-abuse
fake accounts
bot detection
fingerprinting
email infrastructure
behavioral analysis
Published: November 18, 2025
Downloadable IOCs: 330

Thousands of Fake Hotel Domains Used in Massive Phishing Campaign

A Russian-speaking threat actor has orchestrated a large-scale phishing campaign targeting travelers by registering over 4,300 domain names since early 2025. The sophisticated operation impersonates major travel brands like Airbnb and Booking.com to steal payment card data. The phishing sites use c…
phishing
malspam
domain registration
2025-11-11
Published: November 11, 2025
Downloadable IOCs: 4135

CHARMING KITTEN

Since June 2024, the Iran-nexus actor CHARMING KITTEN has been creating new network infrastructure for credential phishing, targeting individuals perceived as threats to the Iranian regime. The actor's infrastructure, known as Cluster B, uses domains with specific characteristics like similar TLDs,…
iran
infrastructure
domain registration
2024-10-04
spear-phishing
credential phishing
mint sandstorm
ta453
apt42
Published: October 4, 2024
Downloadable IOCs: 11

Exploring Newly Released Top-Level Domains

An investigation into 19 new top-level domains (TLDs) released in the past year revealed various malicious activities, including phishing campaigns, distribution of potentially unwanted programs, torrenting websites, and pranking campaigns. The study found a correlation between the TLDs' general av…
phishing
dns
cybersecurity
2024-09-02
domain abuse
top-level domains
graph-based detection
redirection campaigns
domain registration
torrenting
Published: September 2, 2024
Downloadable IOCs: 22
Click here to see more Attack Reports