Industry

Under the DNS Hood of an Ongoing Legacy MSHTA Tool Attack

A DNS analysis of infrastructure behind ongoing MSHTA abuse uncovered malicious registrations, typosquatting clusters, victim activity, and hundreds of linked indicators, revealing how legacy Windows tooling continues enabling modern malware campaigns through interconnected DNS intelligence. more

IPv4 Market Enters a New Phase of Price Recovery and Supply Discipline

After months of stabilization, the IPv4 market is showing renewed pricing strength as inventory tightens and buyer competition increases, signaling a firmer environment while durable demand continues to support long-term market fundamentals and future value. more

What Running .CA and .NL Taught Us About Building Better Registry Infrastructure

Running .CA and .NL has taught Hello Registry that true back-end excellence depends on resilience, adaptability and operational experience, helping registries navigate evolving technical, policy and security demands with confidence and long-term stability. more

macOS ClickFix Campaign Delivers AMOS and Other Infostealers: A DNS Deep Dive

A DNS deep dive into Microsoft's macOS ClickFix campaign uncovered victim infrastructure, typosquatting clusters, malicious registrations, and hundreds of linked indicators, exposing a broader infostealer ecosystem beyond the original 140 network IoCs identified by Microsoft. more

Making the Most of the 2026 New gTLD Application Round

The ICANN new gTLD application window is now open, giving organizations a limited opportunity to secure and operate their own top-level domain. Learn how Hello Registry can help simplify the application process from start to launch. more

DNS Deep Dive: TA416 European Government Espionage Campaigns

An extensive DNS analysis of TA416's renewed European espionage campaign uncovered malicious infrastructure, typosquatting clusters, historical network activity, and thousands of connected artifacts that expand defenders' visibility beyond Proofpoint's original indicators for proactive threat hunting. more

DNS Deep Dive: GHOST STADIUM Takes Advantage of FIFA 2026

A DNS investigation of the GHOST STADIUM phishing operation uncovered typosquatting clusters, malicious infrastructure, victim-linked IP activity, and thousands of connected domains, revealing the scale of a FIFA 2026 ticket fraud ecosystem. more

A DNS Investigation of Shadow-Earth-053

A DNS investigation of Shadow-Earth-053 uncovered hundreds of victim-linked connections and a sprawling infrastructure tied to China-aligned cyber-espionage. Analysis of known indicators exposed additional domains, IP addresses, and registration patterns that broaden the campaign's suspected footprint. more

DNS Deep Diving into FakeWallet Crypto Stealer

A DNS-focused investigation of the FakeWallet crypto-stealer campaign uncovered links to malicious infrastructure, potential victims, and thousands of connected domains, revealing signs of pre-staged operations and suggesting the wallet-phishing scheme was broader and longer-running than first reported. more

IPv4 Market Firms as Demand Holds Strong and Supply Tightens

The IPv4 market is showing renewed firmness as demand remains strong, large-block prices edge higher, and supply tightens in key segments. Recent transaction data suggests stabilization is taking hold, with availability becoming an increasingly important market driver. more

DNS Deep Dive: Pushpaganda Network IoCs

A DNS investigation into Pushpaganda, an AI-powered scam network that infiltrated Google Discovery feeds, uncovered more than 1,000 connected domains, 162 linked IP addresses, and evidence that several infrastructure assets were registered with malicious intent. more

The DNS Anatomy of the Axios Supply Chain Attack

A DNS-focused investigation into the Axios NPM supply chain attack uncovered typosquatting networks, victim-linked infrastructure, and hundreds of connected domains, revealing how malicious actors built and sustained a sprawling cyber campaign around compromised software dependencies. more