Search
Home
Request an Invite
Thank You
old - Collaboration Submission
Thank You-Submission
DomainTools Investigation - Submit to Collaborate
DomainTools Investigation Newsletter Registration
DomainTools Investigation Newsletter Registration TYP
Closed Door Session TYP
Home
Request an Invite
Thank You
old - Collaboration Submission
Thank You-Submission
DomainTools Investigation - Submit to Collaborate
DomainTools Investigation Newsletter Registration
DomainTools Investigation Newsletter Registration TYP
Closed Door Session TYP
Search
Home
Request an Invite
Thank You
old - Collaboration Submission
Thank You-Submission
DomainTools Investigation - Submit to Collaborate
DomainTools Investigation Newsletter Registration
DomainTools Investigation Newsletter Registration TYP
Closed Door Session TYP
Back to Home
Threat Intelligence
Community
DNS
Threat Intelligence
Cybersecurity Reading List - Week of 2025-10-27
Commentary followed by links to cybersecurity articles that caught our interest internally.
Community
DNS
Threat Intelligence
DomainTools Investigations BSides NoVa Recap
Ian Campbell's recap of DTI's participation at BSides NoVa
cryptocurrency
Cybercrime
Malware
Threat Intelligence
Inside a Crypto Scam Nexus
A massive crypto wallet-drain conspiracy links fake trading sites to a single criminal IP address. See our investigative...
Community
DNS
Threat Intelligence
Cybersecurity Reading List - Week of 2025-09-29
Commentary followed by links to cybersecurity articles that caught our interest internally.
China
Cyber Espionage
Salt Typhoon
Threat Intelligence
Inside Salt Typhoon: China’s State-Corporate Advanced Persistent Threat
Salt Typhoon is a Chinese state-sponsored cyber threat group aligned with the Ministry of State Security (MSS), specializing...
Cybercrime
DNS
Malware
Threat Intelligence
Banker Trojan Targeting Indonesian and Vietnamese Android Users
A group has been targeting Indonesian and Vietnamese Android users with banking trojans disguised as legitimate payment and...
cryptocurrency
PoisonSeed
SCATTERED SPIDER
Threat Intelligence
Newly Identified Domains Likely Linked to Continued Activity from PoisonSeed E-Crime Actor
DomainTools Investigations identified a set of malicious domains registered since 01 June 2025 likely linked to the ecrime...
Google
Malware
SpyNote
Threat Intelligence
SpyNote Malware Part 2
Deceptive websites are mimicking popular Android application install pages on the Google Play Store to lure victims into...
DNS
LummaStealer
Malware
Threat Intelligence
Hunting for Malware Networks
Hunting for new malware delivery infrastructure often entails the identification and tracking of common techniques to deliver...
Community
DNS
Generative AI
Threat Intelligence
Hacker Summer Camp Recap - A Snick Snack
What do scavenger hunts, malware, and wildcards have in common?