The Irony: Data Privacy Sites Bring Risks Instead of Protection

It’s ironic to think that sites hinting at promoting data privacy awareness and/or protection are serving malware instead, but that’s a sad truth. We found thousands of web properties through WHOIS, IP, and DNS searches to identify malicious data privacy-related sites.

Our deep dive allowed us to build detailed threat research materials containing:

• Thousands of domains and subdomains containing the strings “data + privacy,” “data + protection,” and “protect + privacy,” several of which turned out to be malicious

• Very few of the web properties had unredacted WHOIS records

• Thousands of IP address resolutions, several of which were dubbed “dangerous” by various malware engines, resulting in a considerable number of additional malicious domains

Download the threat research materials now to access the complete list of identified artifacts used to conduct additional enrichment and threat analysis.