Industry

The Spookiest DDoS Attacks in History

In the spirit of Halloween, we've compiled a few chilling tales of the most ghoulish cyber attacks on some of the largest corporations in the world. We only hope that after you finish reading our stories, you live to tell the tale of the most horrifying distributed-denial of service (DDoS) attacks in history. more

Neustar to Launch usTLD Stakeholder Council

In its plan to manage the usTLD, Neustar proposed to create a stakeholder council ("usTLD Stakeholder Council") to ensure that the usTLD remains a trusted space for all Americans and to facilitate stakeholder input into usTLD policies. more

Quova Rebrands as Neustar IP Intelligence

While the Quova services are being rebranded, its data services, customer service and the team behind them will remain the same. "The name is changing, but everything it represents will be intact - top-quality, real-time data backed by terrific service," said Berry. more

Facebook Is Now Meta, Will Threat Actors Ride the Wave?

Facebook CEO Mark Zuckerberg, on 28 October in Connect 2021, introduced Meta, which will be Facebook’s parent company, along with the organization’s various apps and technologies. According to Zuckerberg, "Meta’s focus will be to bring the metaverse to life and help people connect, find communities, and grow businesses." more

What Cyber Threat Intelligence Tools Can Reveal about a Targeted Attack

Targeted attacks are considered insidious digital threats as they may lead to debilitating data breaches with substantial financial repercussions. Apart from money lost to theft, victims may shed even more resources as they face expensive lawsuits, hefty fines, and settlements for failing to comply with data privacy regulations in addition to reputational damage. more

Exposing the New Potential Ways Royal Ransomware Gets Delivered

DEV -- 0569, a threat actor Microsoft has been monitoring, was recently observed deploying Royal ransomware via pages posing as legitimate software download sites and repositories, among other stealthy tactics. He has so far used fake download sites for Adobe Flash Player, AnyDesk, Zoom, and TeamViewer in phishing emails and domains. more

New Feature in PowerMTA v4.5: IP Based Rate Limiting

One feature in PowerMTA's GA release of v4.5 is IP based Rate Limiting. The "source-ip-max-msg-rate" is specifically designed to give delivery engineers/admins additional control. more

New Chinese “Mobile” Top-Level Domain Now Available

Global registry services provider and dotMobi registry operator Afilias today announced the general availability of its first Internationalized Domain Name (IDN) at the top level: .?? (.MOBILE in Chinese). more

Why Domain Seizure May Not Stop Money Mule Recruitment Campaigns

In the realm of cybersecurity, seizing domains unfortunately doesn't always mean the end for the threats they pose. Such could be the case for the 18 domains U.S. law enforcement agents recently took offline for their ties to a money mule recruitment operation reported by Bleeping Computer. more

Insurance Companies Are The Target of Recent Cybersquatting Campaigns

An ongoing cybersquatting campaign targeting MetLife, a global insurance company, was reported by IBM Exchange X-Force, listing 12 malicious domains. We dug deeper into the campaign as part of our goal to expand lists of indicators of compromise (IoCs). more

60+ PayPal Potential Typosquatting Domains Detected in the Beginning of June

PayPal is still one of the most imitated brands on the Internet. From 1-8 June 2020, the Typosquatting Data Feed detected a total of 64 PayPal lookalike domains. more

Carpet-Bombing Attacks: A Rising Threat to ISPs

News of a South African ISP's two-day outage sent the industry abuzz last month, highlighting the need for improved distributed denial-of-service (DDoS) attack mitigation. more

Post-Riot Domain Registration Trends: Findings From Tracking Trump-Related Domains and Subdomains

The U.S. Capitol riot on 6 January 2021 was an unexpected event following the 2020 U.S. elections. The incident also made headlines worldwide, prompting us to track the registration trend for Trump-related domains and subdomains. We also looked into two domains for Trump's e-commerce stores that Shopify shut down. more

Uncovering Other DarkTortilla Threat Vectors

As an age-old digital threat, phishing just continues to grow in sophistication over time, as DarkTortilla showed. Cyble Research and Intelligence Labs (CRIL) published a technical analysis of the threat specifically targeting Cisco and Grammarly. Are there other potential threat vectors, though? more

New Case Study: Jobtome.com Replaces 30 Postfix Servers with a Single PowerMTA

Jobtome.com helps job seekers access millions of jobs gathered from hundreds of thousand's of recruitment agencies and employer sites across Europe. more