Industry

Workshop Report Published: State of the DNS in 2022

In November 2022, eco's topDNS Initiative invited about 30 experts, including representatives of three different Directorate Generals by the EU Commission, to a workshop in Brussels to work together on a secure future for the DNS (Domain Name System). The topDNS Initiative has now published its 28-page final report. more

Catching Batloader Disguised as Legit Tools through Threat Vector Identification

Putting on a mask on malware has always worked to trick users into downloading them, and the threat actors behind Batloader banked on just that. Trend Micro researchers tracked and analyzed Batloader-related developments toward the end of 2022. more

Verisign Domain Name Industry Brief: 350.4 Million Domain Name Registrations in Q4 2022

Today, Verisign released the latest issue of The Domain Name Industry Brief, which shows that the fourth quarter of 2022 closed with 350.4 million domain name registrations across all top-level domains (TLDs), an increase of 0.5 million domain name registrations, or 0.1%, compared to the third quarter of 2022. Domain name registrations have increased by 8.7 million, or 2.6%, year over year. more

Gauging How Big a Threat Gigabud RAT Is Through an IoC List Expansion Analysis

Targeting governments the world over in cyber attacks is not a novel concept. Doing that using mobile apps, however, is quite new as a tactic. And that's what Cyble researchers reported as Gigabud RAT's modus operandi - trailing its sights on citizens of Thailand, the Philippines, and Peru who use government-owned institutions' mobile apps. more

Recommendations to Expedite the Next Round of Top-Level Domains

The launch of the 'next' round of new generic top-level domain (gTLDs) program has experienced significant delays since the 2012 round, resulting in frustration for prospective applicants and undermined trust in the multistakeholder governance model. more

The Fight Against Hive Ransomware May Not Be Done as Yet-Unidentified Artifacts Show

The Hive Ransomware Group has had more than 1,500 victims across more than 80 countries worldwide. They attacked hospitals, school districts, financial firms, and critical infrastructure until the U.S. Department of Justice (DOJ) disrupted their operations. Have we seen the fall of the group's entire infrastructure? more

Profiling a Massive Portfolio of Domains Involved in Ransomware Campaigns

Security researcher Dancho Danchev discovered a portfolio of domains and IP addresses used by known threat actors in ransomware campaigns. The said portfolio consists of 62,763 domain names and 810 IP addresses. We analyzed a sample of these malicious properties using TIP and found that: more

Radix Reports $7.6M in Total Premium Domain Name Retail Revenue in 2022, Highest-Ever Annual Number to Date

Radix today shared its bi-annual premium report for the second half of 2022, giving a complete overview of the premium domain sales across its new TLD portfolio from 1st July to 31st December 2022. more

State of the IPv4 Marketplace During 2022: Complex & Unpredictable

Here are a few observations on the state of the IPv4 marketplace during 2022. All the statistics here exclude transfers of IPv4 addresses involved in mergers and acquisitions. more

Radix Reports Creators Ranging from Solo Entrepreneurs to Major Celebrities Adopting .Store for eCommerce

Radix, the operator of top-level domains .Store, .Online, .Tech, .Website, .Space, .Press, .Site, .Host, .Fun and .Uno, has earned a reputation as one of the most innovative and effective marketers in the domain industry. Today the company shared results from a 3-month creators.store campaign they launched in November that provided further proof of that. more

SocGholish IoCs and Artifacts: Tricking Users to Download Malware

As all initial-access threats go, SocGholish is among the trickiest. It often comes disguised as software updates, deceiving victims into downloading a malicious payload that could eventually lead to more lethal cyber attacks. In fact, researchers at ReliaQuest found evidence that an initial SocGholish malware distribution was intended to deploy ransomware. more

Detecting Carder-Friendly Forums through IoC Expansion

Carding or the theft and consequent selling of credit and other payment card information to users has long been a problem. And with the ease of obtaining hosts for carder forums and communities and hiding their tracks online, the threat has become even bigger. more