Over the past few decades, researchers from both academia and industry have significantly increased the number and quality of malicious domain detectors. From a few early heuristic-based detection methods, today there are hundreds of papers on machine learning- and AI-based detectors, matched by industry capabilities. [Read More]

Domain Wars is the struggle between cybercriminals registering domain names for their illicit endeavors and defenders (such as law enforcement, security researchers, and policy makers) trying to stop these malicious domain registrations. [Read More]

DNS hijacking allows cybercriminals to modify the DNS records of benign domain names and redirect unsuspecting users to malicious servers. Threat actors compromise domains for various attacks, including men-in-the-middle (MitM) attacks, drive-by downloads, phishing, and scams. DNS hijacking is a pervasive threat that can have catastrophic consequences for domain owners... [Read More]

Cybercriminals register domain names for various malicious and illicit endeavors, including: [Read More]

In the very first post in this blog, I explain domain shadowing using a few examples and summarize results from our Unit42 blog post. [Read More]