A Closer Look at Active Cyber Jihad Web Properties
Cyber jihad refers to the way extremist terrorists use the Internet to wage war against their enemies.1 Typical targets include the U.S., Western European countries, and Israel.
Experts say waging war is no longer limited to the physical world but has crossed over to the virtual realm. And 67 domains identified as indicators of compromise (IoCs) to recent cyber jihad attacks prove that.
WHOIS, DNS, and IP data analysis of the IoCs led to the discovery of more artifacts, including:
- 200+ IP addresses to which the domains identified as IoCs resolved
- Nearly 40 unredacted email addresses used to register the domains tagged as IoCs
- 500+ additional possibly connected domains since they shared the IoCs’ registrant email addresses or IP hosts, two of which have been dubbed “malicious” by various malware engines
Download a sample of the threat research materials now or contact us to access the complete set of research materials.
—
- [1] https://scholarship.law.edu/cgi/viewcontent.cgi?referer=&httpsredir=1&article=1353&context=commlaw
Latest Reports
DNS Spotlight: BigBear 2.0 PhaaS Targets Span 40+ Countries
WhoisXML API uncovered 1,600+ additional artifacts linked to BigBear 2.0. Download the threat research materials now.
A DNS Investigation of the ASCII Smuggling Phishing Campaign
WhoisXML API uncovered 100+ additional artifacts linked to the ASCII smuggling phishing campaign. Download the threat research materials now.
A DNS Deep Dive into a Silver Fox-Style Fake Installer Campaign
WhoisXML API uncovered 1,500+ additional artifacts linked to a Silver Fox-style fake installer campaign. Download the threat research materials now.