Search
Home
Request an Invite
Thank You
Collaboration Submission
Thank You-Submission
Home
Request an Invite
Thank You
Collaboration Submission
Thank You-Submission
Search
Home
Request an Invite
Thank You
Collaboration Submission
Thank You-Submission
Back to Home
Research
AI
Browser Extensions
Threat Intelligence
Deceptive Browser Extensions within the Google Store: A Study in AI Slop
Like any garden, the digital landscape experiences the emergence of unexpected blooms. Among the helpful flora of browser...
Malicious Download
Malware
Threat Intelligence
Newly Registered Domains Distributing SpyNote Malware
Deceptive websites hosted on newly registered domains are being used to deliver AndroidOS SpyNote malware. These sites mimic...
Bulletproof Hosting
Cybercrime
Spoofed Domain
Threat Intelligence
Where to Find Aspiring Hackers
This research analyzes Proton66, a bulletproof hosting network enabling cybercrime operations, serving as a hub for aspiring...
credential harvesting
Cyber Espionage
Cybercrime
Phishing
Spoofed Domain
Ukraine
Phishing Campaign Targets Defense and Aerospace Firms Linked to Ukraine Conflict
DomainTools Investigations (DTI) identified a large-scale phishing infrastructure heavily focused on defense and aerospace...
Disinformation
Homoglyph Attacks
Typosquatting
Domain Registrars Powering Russian Disinformation: A Deep Dive into Tactics and Trends
In the digital battlefield of influence operations, domain registrations serve as the foundation for launching disinformation...
C2
Malware
Chinese Malware Delivery Domains Part II: Data Collection
This report dives deeper into activity relating to the previously reported cluster of Chinese Malware Delivery domains. Spoofed...
Account Trafficking
Disinformation
Fraud
Account Trafficking Websites in December 2024
This report examines the illicit online trade of aged and verified accounts for platforms like social media, email, and Google...
C2
Malware
Chinese Malware Delivery Websites
Malicious Browsers, Messengers, VPNs, and More… Hundreds of newly registered domains are actively targeting Chinese-speaking...
CTI Grapevine Becomes DomainTools Investigations
Hello CTI Grapevine Superfriends! You may have noticed some subtle changes to our website: As of today, CTI Grapevine became part...
Phishing
Cyberhaven Breach Likely Part of a Long-Term Criminal Campaign
Overview On 27 December 2024, the technology company Cyberhaven reported that an unnamed actor replaced its Google Chrome...