Hunting for TimbreStealer Malware Artifacts in the DNS
WhoisXML API found thousands of artifacts potentially connected to the newly detected TimbreStealer malware. Download the threat research materials now.
Continue reading Download reportA Closer Look at Active Cyber Jihad Web Properties
Cyber jihad refers to the way extremist terrorists use the Internet to wage war against their enemies.1 Typical targets include the U.S., Western European countries, and Israel.
Experts say waging war is no longer limited to the physical world but has crossed over to the virtual realm. And 67 domains identified as indicators of compromise (IoCs) to recent cyber jihad attacks prove that.
WHOIS, DNS, and IP data analysis of the IoCs led to the discovery of more artifacts, including:
- 200+ IP addresses to which the domains identified as IoCs resolved
- Nearly 40 unredacted email addresses used to register the domains tagged as IoCs
- 500+ additional possibly connected domains since they shared the IoCs’ registrant email addresses or IP hosts, two of which have been dubbed “malicious” by various malware engines
Download a sample of the threat research materials now or contact us to access the complete set of research materials.
—
- [1] https://scholarship.law.edu/cgi/viewcontent.cgi?referer=&httpsredir=1&article=1353&context=commlaw