MOVEit Bug-CLOP Ransomware Threat Vector Identification Aided by DNS Intelligence

The beginning of the month of June, according to CleanINTERNET, marked the emergence of several zero-day attacks targeting vulnerable MOVEit servers to exfiltrate confidential data. MOVEit Transfer is a managed file transfer software that supports file and data exchange. more

IPv4.Global Achieves ARIN Qualified Facilitator Status

The recently launched Qualified Facilitator Program was developed so buyers and sellers of IPv4 addresses can easily and confidently identify qualified brokers to help them navigate the complex IPv4 address transfer process. more

Tracing Truebot’s Roots through a DNS Deep Dive

On 12 June, the DFIR Report published an in-depth analysis of a Truebot intrusion that began with several page redirects via a Traffic Distribution System (TDS) and ended with dropping a Master Boot Record (MBR) killer wiper onto a victim's computer. The result? more

Radix Releases 2022 Domain Renewals Data

Radix, one of the world's largest portfolio registries, has released a report on domain renewals based on Radix's internal analysis of nTLD renewals in 2022. more

CSC Launches Groundbreaking Domaincasting Digital Blocking Network

CSC, an enterprise-class domain registrar and world leader in mitigating domain and domain name system (DNS) threats, has launched its new Domaincasting^SM digital blocking network - a complement to its current Enforcement services. more

Alleviating the Risks .zip and Similar Domain Extensions Could Pose via DNS Intelligence

Google's announcement of the launch of the .zip ngTLD was met by a lot of debate. Many believe threat actors could abuse the ngTLD for phishing and other malicious campaigns, primarily since it could be easily confused with the .zip file extension. more

Years-Long Wait on ARIN IPv4 Waitlist

ARIN warned that the wait time for IPv4 space from its Waitlist is years, not months, at NANOG 88 in Seattle. There were 632 requests on the list at the end of May 2023, and it grew by 429 requests in the last year. more

Scanning for LockBit Ransomware DNS Traces

ReliaQuest named LockBit one of the most effective and undoubtedly most prolific currently active ransomware groups today. In fact, the malware topped their latest ransomware quarterly list for the first three months of 2023, a continuation of their 2022 observation. more

New Global Initiative Aims to Strengthen Online Brand Protection

A new initiative led by GoDaddy Registry in partnership with Identity Digital and other industry leaders is launching to develop innovative solutions for enhanced brand protection online. more

Potential Traces of Aurora Spread Via Windows Security Update Malvertisements in the DNS

Threat actors are quite adept at changing tactics once the cybersecurity community or law enforcement catches up to them. That is evident in the recent resurgence of malvertising though no longer through users' browsers as in the past. more