logo

Infoblox Blog

ID: 6d870df2-31c0-50b0-887f-b393ca26ce46

STIX ID: identity--6d870df2-31c0-50b0-887f-b393ca26ce46

Feed Type: rss

Earliest post: 2025-11-19

Latest post: 2026-10-23

Threat intelligence, DNS-centric security research, and practical guidance on network protection, threat hunting, and infrastructure-level defenses from the Infoblox security team.

01/01/2020
10/25/2026
Title Date Published ↓Threat ScoreAuthorVisible
Inside Help TDS: Hotejka, Cloudflare Pages and Predictive Detection2026-10-1575Infoblox Threat IntelTrue
When a Wallet Drainer Asks DNS Where to Go2026-10-0975Infoblox Threat IntelTrue
How Money Laundering, Scams, and Espionage Hide in a Web Full of Casino Garbage2026-09-1582Infoblox Threat IntelTrue
$7 Million in Expired Domains Fuel a Streaming Empire with a Malware Secret2026-08-1380Infoblox Threat IntelTrue
Dropcatch Scavengers: Expired Malicious Domains Become Cash Cows2026-08-1375Infoblox Threat IntelTrue
What the Infoblox 2026 Threat Landscape Report Reveals About Cybercrime2026-07-3175Bart Lenaerts-BergmansTrue
The Procurement Trap: Inside an AiTM Campaign Targeting Global Institutions2026-07-2175Infoblox Threat IntelTrue
The Missing Link in the Anti-Scam Chain: Why DNS Belongs in the Room2026-07-1770Craig SandersonTrue
Fake Installers, Fake Reviews, Fake Services – Real Proxies, Real Victims2026-07-0775Infoblox Threat IntelTrue
Residential Proxies: Why DNS Is the Stronger Play2026-07-0285Craig SandersonTrue
From San Pedro to Salinas: How a Chinese Framework “DCloud Uni-App” Powers a Global Scam Economy2026-06-2570Infoblox Threat IntelTrue
Hot Take: Operation Endgame vs. SocGholish2026-06-1878Infoblox Threat IntelTrue
Residential Proxies in the Wild2026-06-0965Infoblox Threat IntelTrue
Lookalike Domains Expose the iPhone Theft Economy2026-05-1470Infoblox Threat IntelTrue
Amusing Numerology: Analysis of the Numbers in Domain Names2026-05-1350Vadym TymchenkoTrue
Hold the Phone! International Revenue Share Fraud Driven by Fake CAPTCHAs2026-04-2365Infoblox Threat IntelTrue
AI, Project Glasswing and DNS: Beyond Vulnerabilities2026-04-2270Craig SandersonTrue
Scams, Slaves and (Malware-as-a) Service: Tracking a Trojan to Cambodia’s Scam Centers2026-04-1078Infoblox Threat IntelTrue
Patterns, Pirates, and Provider Action: What We Learned Working with Keitaro2026-03-3178Infoblox Threat IntelTrue
No Reach, No Risk: The Keitaro Abuse in Modern Cybercrime Distribution2026-03-2678Infoblox Threat IntelTrue
Inside Keitaro Abuse: A Persistent Stream of AI-Driven Investment Scams2026-03-1975Infoblox Threat IntelTrue
Connecting Dots with SSL Certificates: Finding Threat Actors with Graph Theory2026-03-0470Zafir AnsariTrue
Abusing .arpa: The TLD That Isn’t Supposed to Host Anything2026-02-2670Infoblox Threat IntelTrue
Banners, Bots and Butchers: An Automated Long Con Targeting Japan, Asia, and Beyond2026-02-1770Infoblox Threat IntelTrue
Compromised Routers, DNS, and a TDS Hidden in Aeza Networks2026-02-0378Infoblox Threat IntelTrue
Inside a Malicious Push Network: What 57M Logs Taught Us2026-01-1550Infoblox Threat IntelTrue
Kimwolf Howls from Inside the Enterprise2026-01-1370Renée BurtonTrue
Scaling the Fraud Economy: Pig Butchering as a Service2026-01-0875Infoblox Threat IntelTrue
Parked Domains Become Weapons with Direct Search Advertising2025-12-1678Infoblox Threat IntelTrue
The DNS Threat Landscape December 2025: A Three-month Lookback2025-12-1178Bart Lenaerts-BergmansTrue
DNS Uncovers Infrastructure Used in SSO Attacks2025-12-0172Infoblox Threat IntelTrue

1–31 of 31