A DNS Investigation of the GootLoader Campaign
WhoisXML API found 1,000+ artifacts that could be connected to the GootLoader campaign. Download the threat research materials now.
Continue reading Download reportA Peek at the V3B Phishing Kit Attack via the DNS Lens
Phishing is already a top global threat. So it doesn’t help the cybersecurity community and law enforcement agencies that even cybercrime newbies can now launch attacks aided by phishing kits.
That is, unfortunately, the case with a malicious campaign aided by the V3B Phishing Kit that has been targeting European banking customers.1
The WhoisXML API research team expanded a list of 28 domains tagged as IoCs for a V3B Phishing Kit-enabled attack and found:
- 177 email-connected domains
- Nine IP addresses, eight of which turned out to be malicious
- 43 IP-connected domains
- 10 string-connected domains
- 32 brand-containing domains
- 4,537 registrant-connected domains, 490 of which were associated with various threats
Download a sample of the threat research materials now or contact sales to discuss your intelligence needs for threat detection and response or other cybersecurity use cases.
—
- [1] https://www.resecurity.com/blog/article/cybercriminals-attack-banking-customers-in-eu-with-v3b-phishing-kit