A U.S. Tax Scammer's Web Infrastructure through the DNS Lens
WhoisXML API found several artifacts that could be connected to an ongoing U.S. tax scam. Download the threat research materials now.
Continue reading Download reportTracking Down Sea Turtle IoCs in the DNS Ocean
The Sea Turtle cyber espionage group recently made waves after launching an attack on a new target country.1 They were also observed using more evasive techniques.
Still, it turns out that Sea Turtle artifacts aren’t endangered. WhoisXML API researchers found hundreds after analyzing and expanding 37 IoCs.2 Leveraging DNS intelligence, we uncovered:
- 81 email-connected domains
- 13 IP-connected domains
- 204 string-connected domains
Download a sample of the threat research materials now or contact us to access the complete set of research materials.
—
- [1] https://www.bleepingcomputer.com/news/security/turkish-hackers-sea-turtle-expand-attacks-to-dutch-isps-telcos/
- [2] https://github.com/StrikeReady-Inc/research/tree/main/2023-12-27%20Sea%20Turtle