Under the Hood of the Infraud Organization Cybercriminal Operation | WhoisXML API

Threat Reports

Under the Hood of the Infraud Organization Cybercriminal Operation

While 36 alleged Infraud Organization members were recently captured and indicted1, the incident may not spell the end of woes related to the gang.

We took a closer look at published indicators of compromise (IoCs) related to Infraud Organization, specifically 11 domains, six IP addresses, and three email addresses, which were used as jump-off points to uncover more potential artifacts and IoCs.

Our deep dive allowed us to build detailed threat research materials that revealed:

  • Thousands of web properties (domains and IP addresses) that could have ties to Infraud Organization.
  • More than 30 of the domains and IP addresses that could have ties to the gang were deemed malicious by various malware engines.

Download the threat research materials now to access the threat analysis and trend identification.

---

  • [1] https://www.justice.gov/opa/pr/thirty-six-defendants-indicted-alleged-roles-transnational-criminal-organization-responsible
Try our WhoisXML API for free
Get started