MOONSHINE and DarkNimbus in the DNS Spotlight
WhoisXML API found 460+ artifacts tied to the Earth Minotaur attack leveraging MOONSHINE and DarkNimbus. Download the threat research materials now.
Continue reading Download reportThe Inner Workings of Aleksei Belan’s Criminal Network
Aleksei Belan is part of the Federal Bureau of Investigation (FBI) Most Wanted List. He was charged for several cybercriminal activities connected to a massive Yahoo! database compromise involving at least 500 million user accounts.1
A recent WhoisXML API study of Belan’s connected infrastructure based on an initial list of seven IP addresses and two unredacted registrant email addresses tagged as indicators of compromise (IoCs) led to the discovery of more than 170 domains that resolved to the IP addresses or registered using the email addresses identified as IoCs.
Download the threat research materials now.
—
- [1] https://www.fbi.gov/wanted/cyber/alexsey-belan