Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Europe is home to many international organizations like Europol, INTERPOL, and NATO, among others. That makes it a prime APT group target.
The WhoisXML API research team analyzed the latest attacks launched by six APT groups known for trailing their sights on Europe using current and historical WHOIS and passive DNS data. We uncovered:
- Artifacts comprising 1.45 times the number of IoCs based on current WHOIS record data
- Historically connected artifacts totaling 360.06 times the number of IoCs
- 2,541 email-connected artifacts that remain active as of this writing
- 15,160 FQDNs hosted on the 36 IP addresses identified as IoCs for BackdoorDiplomacy, MoustachedBouncer, Muddy Water, and ToddyCat under 1,098 root domains
Download the white paper now or contact sales to discuss your intelligence needs for threat detection and response or other cybersecurity use cases.