Exploring the SideWinder APT Group’s DNS Footprint
WhoisXML API found 570+ artifacts that could be connected to the SideWinder APT group. Download the threat research materials now.
Continue reading Download reportThe Irony: Data Privacy Sites Bring Risks Instead of Protection
It’s ironic to think that sites hinting at promoting data privacy awareness and/or protection are serving malware instead, but that’s a sad truth. We found thousands of web properties through WHOIS, IP, and DNS searches to identify malicious data privacy-related sites.
Our deep dive allowed us to build detailed threat research materials containing:
- Thousands of domains and subdomains containing the strings “data + privacy,” “data + protection,” and “protect + privacy,” several of which turned out to be malicious
- Very few of the web properties had unredacted WHOIS records
- Thousands of IP address resolutions, several of which were dubbed “dangerous” by various malware engines, resulting in a considerable number of additional malicious domains
Download the threat research materials now to access the complete list of identified artifacts used to conduct additional enrichment and threat analysis.