A U.S. Tax Scammer's Web Infrastructure through the DNS Lens
WhoisXML API found several artifacts that could be connected to an ongoing U.S. tax scam. Download the threat research materials now.
Continue reading Download reportBehind the Genesis Market Infrastructure: An In-Depth DNS Analysis
The Federal Bureau of Investigation (FBI) and other law enforcement agencies shut down Genesis Market, a darknet market for cybercriminal attack tools, in April 2023.1 Apart from seizing the operators’ infrastructure, more than a hundred people were nabbed for taking part in the malicious operation. Does that spell the end for the black market?
The WhoisXML API research team sought to find out using 12 email addresses Dancho Danchev collated as indicators of compromise (IoCs). To determine if any Genesis Market web properties remain online, we performed an IoC list expansion analysis that led to the discovery of:
- 28 email-connected domains
- Five IP addresses
- Two IP-connected domains
- 2,417 string-connected domains, three of which turned out to be malicious based on a bulk malware check
Download a sample of the threat research materials now or contact us to access the complete set of research materials.
—
[1] https://techcrunch.com/2023/04/05/fbi-genesis-market-seized-stolen-logins/