Infoblox Threat Intel Blog

ID: ca5a5d7c-5b69-538a-89e5-cad879478bfa

STIX ID: identity--ca5a5d7c-5b69-538a-89e5-cad879478bfa

Feed Type: rss

Earliest post: 2024-05-28

Latest post: 2026-05-14

Research-driven DNS threat intelligence, highlighting emerging domains, threat actor infrastructure, and global DNS abuse patterns.

Exclude posts that do not describe a security incident

Classification

Min Pub Date

01/01/2020

Max Pub Date

06/04/2026

Title	Date Published ↓	Describes Incident	Author	Visible
Lookalike Domains Expose the iPhone Theft Economy	2026-05-14	True	Infoblox Threat Intel	True
Hold the Phone! International Revenue Share Fraud Driven by Fake CAPTCHAs	2026-04-23	True	Infoblox Threat Intel	True
Scams, Slaves and (Malware-as-a) Service: Tracking a Trojan to Cambodia’s Scam Centers	2026-04-10	True	Infoblox Threat Intel	True
Patterns, Pirates, and Provider Action: What We Learned Working with Keitaro	2026-03-31	True	Infoblox Threat Intel	True
No Reach, No Risk: The Keitaro Abuse in Modern Cybercrime Distribution	2026-03-26	True	Infoblox Threat Intel	True
Inside Keitaro Abuse: A Persistent Stream of AI-Driven Investment Scams	2026-03-19	True	Infoblox Threat Intel	True
Abusing .arpa: The TLD That Isn’t Supposed to Host Anything	2026-02-26	True	Infoblox Threat Intel	True
Banners, Bots and Butchers: An Automated Long Con Targeting Japan, Asia, and Beyond	2026-02-17	True	Infoblox Threat Intel	True
Compromised Routers, DNS, and a TDS Hidden in Aeza Networks	2026-02-03	True	Infoblox Threat Intel	True
Inside a Malicious Push Network: What 57M Logs Taught Us	2026-01-15	True	Infoblox Threat Intel	True
Kimwolf Howls from Inside the Enterprise	2026-01-13	True	Renée Burton	True
Scaling the Fraud Economy: Pig Butchering as a Service	2026-01-08	True	Infoblox Threat Intel	True
Parked Domains Become Weapons with Direct Search Advertising	2025-12-16	True	Infoblox Threat Intel	True
Parked Domains Become Weapons with Direct Search Advertising	2025-12-16	True	Infoblox Threat Intel	True
DNS Uncovers Infrastructure Used in SSO Attacks	2025-12-01	True	Infoblox Threat Intel	True
DNS Uncovers Infrastructure Used in SSO Attacks	2025-12-01	True	Infoblox Threat Intel	True
Vault Viper: High Stakes, Hidden Threats	2025-10-23	True	Infoblox Threat Intel	True
Vault Viper: High Stakes, Hidden Threats	2025-10-23	True	Infoblox Threat Intel	True
Pig Butchering Scams and Their DNS Trail: Linking Threats to Malicious Compounds	2025-10-09	True	Infoblox Threat Intel	True
Detour Dog: DNS Malware Powers Strela Stealer Campaigns	2025-09-30	True	Infoblox Threat Intel	True
Detour Dog: DNS Malware Powers Strela Stealer Campaigns	2025-09-30	True	Infoblox Threat Intel	True
Deniability by Design: DNS-Driven Insights into a Malicious Ad Network	2025-09-16	True	Infoblox Threat Intel	True
Deniability by Design: DNS-Driven Insights into a Malicious Ad Network	2025-09-16	True	Infoblox Threat Intel	True
Inside the Robot: Deconstructing VexTrio’s Affiliate Advertising Platform	2025-08-14	True	Infoblox Threat Intel	True
Inside the Robot: Deconstructing VexTrio’s Affiliate Advertising Platform	2025-08-14	True	Infoblox Threat Intel	True
VexTrio Unmasked: A Legacy of Spam and Homegrown Scams	2025-08-12	True	Infoblox Threat Intel	True
VexTrio Unmasked: A Legacy of Spam and Homegrown Scams	2025-08-12	True	Infoblox Threat Intel	True
VexTrio’s Origin Story: From Spam to Scam to Adtech	2025-08-06	True	Infoblox Threat Intel	True
VexTrio’s Origin Story: From Spam to Scam to Adtech	2025-08-06	True	Infoblox Threat Intel	True
Vexing and Vicious: The Eerie Relationship between WordPress Hackers and an Adtech Cabal	2025-06-12	True	Infoblox Threat Intel	True
Vexing and Vicious: The Eerie Relationship between WordPress Hackers and an Adtech Cabal	2025-06-12	True	Infoblox Threat Intel	True
Cloudy with a Chance of Hijacking Forgotten DNS Records Enable Scam Actor	2025-05-20	True	Infoblox Threat Intel	True
Cloudy with a Chance of Hijacking Forgotten DNS Records Enable Scam Actor	2025-05-20	True	Infoblox Threat Intel	True
Telegram Tango: Dancing with a Scammer	2025-05-06	True	Infoblox Threat Intel	True
Telegram Tango: Dancing with a Scammer	2025-05-06	True	Infoblox Threat Intel	True
Uncovering Actor TTP Patterns and the Role of DNS in Investment Scams	2025-04-28	True	Infoblox Threat Intel	True
DNS Early Detection – Malicious Trojan Installers for WINSCP and PUTTY – Breaking the Kill Chain	2024-08-29	True	Michael Zuckerman	True
DNS Early Detection – Breaking the Black Basta Ransomware Kill Chain	2024-08-01	True	Michael Zuckerman	True
Who Knew? Domain Hijacking Is So Easy	2024-07-31	True	Infoblox Threat Intel	True
Let’s Be Careful Out There	2024-07-25	True	Cricket Liu	True
Gambling is No Game: DNS Links Between Chinese Organized Crime and Sports Sponsorships	2024-07-22	True	Infoblox Threat Intel	True
RDGAs: The Next Chapter in Domain Generation Algorithms	2024-07-17	True	Infoblox Threat Intel	True
DNS Early Detection – Breaking the CoralRaider Kill Chain	2024-07-02	True	Michael Zuckerman	True
What a Show! An Amplified Internet Scale DNS Probing Operation	2024-06-03	True	Infoblox Threat Intel	True
DNS Early Detection – Breaking the Fake Web3 Gaming Kill Chain	2024-05-29	True	Michael Zuckerman	True
VexTrio Viper Adds a New DNS TDS Domain	2024-05-28	True	Infoblox Threat Intel	True