Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
The Ashiyane Digital Security Team is known to be a gray hat network security company based in Iran.1 It has been allegedly connected to several state-sponsored attacks against various countries over the years.
Despite the shutdown of the associated Ashiyane Forum in 2018, domains potentially tied to some of its members can still be uncovered.
To help with providing relevant intelligence to the security community, WhoisXML API Threat Researcher Dancho Danchev uncovered a total of 147 domains with ties to individuals connected to the Ashiyane Digital Security Team or the Ashiyane Forum.
The artifacts featured in the report can serve as good starting points to help with cyber campaign attribution and more in-depth investigations.
Get access to our findings and uncover more on your own. Download the report now.
—
- [1] https://www.recordedfuture.com/ashiyane-forum-history/