Revolver Rabbit gang registers 500,000 domains for malware campaigns

Infoblox researchers uncovered that the cybercriminal group "Revolver Rabbit" used registered domain generation algorithms (RDGAs) to purchase over 500,000+ domains (costing roughly $1M) to host decoy and live C2 infrastructure for XLoader infostealer variants targeting Windows and macOS; the report highlights the RDGA pattern (dictionary words + numbers with dashes), provides domain examples, and emphasizes how RDGAs conceal large-scale operations and complicate detection.