A U.S. Tax Scammer's Web Infrastructure through the DNS Lens
WhoisXML API found several artifacts that could be connected to an ongoing U.S. tax scam. Download the threat research materials now.
Continue reading Download reportNotPetya: Not Quite Dead, as Recent IoCs Show
NotPetya first saw light in June 2017, shortly after Petya’s emergence. NotPetya was believed to have caused organizations worldwide US$10 million in damages.1
Years after, NotPetya continues to cause malware mayhem, as WhoisXML API threat researcher Dancho Danchev’s in-depth analysis of the malware perpetrator GRU Unit’s infrastructure shows. His deep dive into the threat revealed:
- More than 50 email addresses believed to belong to members of the GRU Unit
- More than 300 domains registered using the email addresses
- A couple of IP address resolutions of the domains
- A couple of name servers serving the domains
Download a sample of the threat research materials now or contact us to access the complete set of research materials.
—
- [1] https://www.brookings.edu/techstream/how-the-notpetya-attack-is-reshaping-cyber-insurance/