Industry

From Counties to Banks: Tracing the Footprint of Ransomware Attack IoCs

SecurityScorecard published a report on a cyber attack that a U.S. county victim announced on 11 September 2022. With ransomware attacks against local government units increasing in the past few years, WhoisXML API researchers decided to build on the list of IP addresses related to the attacks. more

Neustar Names Joe Pasqua to Head Neustar Labs

Neustar Inc. today announced the appointment of Joe Pasqua as Vice President of Neustar Labs, a newly created position. Mr. Pasqua was previously chief technology officer of Symantec's $2B Data Center business, and later led that company's global research, producing technologies for a diverse set of security and storage products. more

From Fake News Proliferation to Data Theft: Tracing the Red Cross Hack to a Misinformation Network

The International Committee of the Red Cross (ICRC) hack in January 2022 led to the compromise of the sensitive information belonging to 515,000 people. While no indicators of compromise (IoCs) relevant to the attack have been publicized, a security researcher did expose a possible link to an Iranian misinformation network. more

Is Blocking via IP Geolocation the Answer to Preventing DDoS Attacks?

If there's anything we learned about the threat landscape, it's that none of us are safe from malicious actors. Becoming a victim is not a matter of "if" but "when." Enterprises are now aware that the thought of being "too big to fail" is no longer applicable. more

Phorpiex Botnet Extortion: DNS Facts and Findings

The Phorpiex botnet has been operating for years now. It first focused on distributing old-school worms that spread via infected USB drives or through chats that relied on the Internet Relay Chat (IRC) protocol. more

QAnon and 8Chan Digital Footprint Analysis and Investigation Expansion

In October, Brian Krebs reported that several websites related to 8Chan and QAnon went offline, albeit only briefly. That happened when the entity protecting them from distributed denial-of-service (DDoS) attacks, CNServers LLC, terminated its service to hundreds of Spartan Host IP addresses... more

NeuStar Extends UltraDNS Network Infrastructure to Australia and China

NeuStar has announced that it has deployed network nodes in Sydney, Australia and Beijing, People's Republic of China, further expanding NeuStar's global constellation of DNS servers and enhancing the delivery of NeuStar UltraDNS services to the Asia-Pacific region. more

BlueCat Networks Partners with Computacenter to Deliver Cloud-Ready IP Address Management (IPAM)

BlueCat Networks, the IPAM Intelligence company, today announced a strategic partnership with Computacenter, Europe's leading independent provider of IT infrastructure services, to provide IP Address Management, DNS and DHCP solutions to commercial and government organizations throughout Germany. more

Signs of MuddyWater Developments Found in the DNS

Cyber espionage group MuddyWater's or Mercury's first major campaign was seen as early as 2012. But as things always go in the cybersecurity realm, threat groups, especially those that gain infamy, don't necessarily just come and go. more

NeuStar Launches Chinese and Japanese Language Domain Names in .BIZ TLD

NeuStar has deployed internationalized domain names (IDNs) for both the Chinese and the Japanese languages in the .BIZ top- level Internet domain. Interested registrants will be able to secure .BIZ domain names using these characters as of April 21, 2007. more

Afilias Limited Acquires .Mobi Domain Registry, Expands Market Leadership

Afilias, a global provider of Internet infrastructure services and the registry operator for .INFO, today announced that it has acquired mTLD Top Level Domain Ltd., the sponsoring organization and registry operator for the .mobi top-level domain. more

Predator Surveillance Software May Not Be Lawful at All

As technology advances, so does the world of espionage. That has given birth to several companies, such as Cytrox, that specialize in creating spyware. Predator, along with other applications of its kind, has been advertised as legal spyware-for-hire. more

Koobface Makes a Comeback

The Koobface Gang gained notoriety from 2008 to the 2010s for spreading malware via Facebook and other social networks. Believe it or not, the gang amassed millions of dollars from their online scams while hiding in plain sight in St. Petersburg, Russia. After being publicly identified in 2012, the gang members shut down their operations. more

Attack Surface Analysis: Most Blacklisted IP Addresses Scrutinized

The attack surface of every Internet user gets wider every day, but it doesn't mean there's nothing that can be done about it. For one, analyzing possible attack vectors, such as suspicious or malicious domain names and IP addresses, can help with attack surface management. more

Behind the Innovative Marketing Rogue Scareware Distribution Network

Cybercriminal network Innovative Marketing made headlines in rogue scareware's heyday. Between its founding in Kyiv, Ukraine, in 2009 and the three years it continued operating, the company reportedly amassed close to US$700 million in revenue. more