A U.S. Tax Scammer's Web Infrastructure through the DNS Lens
WhoisXML API found several artifacts that could be connected to an ongoing U.S. tax scam. Download the threat research materials now.
Continue reading Download reportUnder the Hood of the Infraud Organization Cybercriminal Operation
While 36 alleged Infraud Organization members were recently captured and indicted1, the incident may not spell the end of woes related to the gang.
We took a closer look at published indicators of compromise (IoCs) related to Infraud Organization, specifically 11 domains, six IP addresses, and three email addresses, which were used as jump-off points to uncover more potential artifacts and IoCs.
Our deep dive allowed us to build detailed threat research materials that revealed:
- Thousands of web properties (domains and IP addresses) that could have ties to Infraud Organization.
- More than 30 of the domains and IP addresses that could have ties to the gang were deemed malicious by various malware engines.
Download the threat research materials now to access the threat analysis and trend identification.
---
- [1] https://www.justice.gov/opa/pr/thirty-six-defendants-indicted-alleged-roles-transnational-criminal-organization-responsible