Back to Home

Threat Intelligence

ChinaDigital SurveillanceThreat Intelligence
Inside the Great Firewall Part 3: Geopolitical and Societal Ramifications
Part 3 analyzes the GFW as geopolitical infrastructure: economic protectionism, the export of cyber sovereignty norms, and...
ChinaDigital SurveillanceThreat Intelligence
Inside the Great Firewall Part 2: Technical Infrastructure
See the Great Firewall's technical blueprint. DomainTools Investigations details the TSG core, packet interception methods,...
ChinaDigital SurveillanceThreat Intelligence
Inside the Great Firewall Part 1: The Dump
Analysis of the 500GB+ Great Firewall data breach revealing China’s state censorship network, VPN evasion tactics, and...
CommunityDNSThreat Intelligence
Cybersecurity Reading List - Week of 2025-10-27
Commentary followed by links to cybersecurity articles that caught our interest internally.
CommunityDNSThreat Intelligence
DomainTools Investigations BSides NoVa Recap
Ian Campbell's recap of DTI's participation at BSides NoVa
cryptocurrencyCybercrimeMalwareThreat Intelligence
Inside a Crypto Scam Nexus
A massive crypto wallet-drain conspiracy links fake trading sites to a single criminal IP address. See our investigative...
CommunityDNSThreat Intelligence
Cybersecurity Reading List - Week of 2025-09-29
Commentary followed by links to cybersecurity articles that caught our interest internally.
ChinaCyber EspionageSalt TyphoonThreat Intelligence
Inside Salt Typhoon: China’s State-Corporate Advanced Persistent Threat
Salt Typhoon is a Chinese state-sponsored cyber threat group aligned with the Ministry of State Security (MSS), specializing...
CybercrimeDNSMalwareThreat Intelligence
Banker Trojan Targeting Indonesian and Vietnamese Android Users
A group has been targeting Indonesian and Vietnamese Android users with banking trojans disguised as legitimate payment and...
cryptocurrencyPoisonSeedSCATTERED SPIDERThreat Intelligence
Newly Identified Domains Likely Linked to Continued Activity from PoisonSeed E-Crime Actor
DomainTools Investigations identified a set of malicious domains registered since 01 June 2025 likely linked to the ecrime...