DomainTools

DomainTools, 3 months ago to random

Sometimes you may want to match domains that have a particular string followed by a top-level domain (TLD), but run into problems with "overmatching," such as finding subdomains buried deep in domains that also match your pattern of interest. In this article, we’ll show you how to use Farsight DNSDB to find such a set of domains quickly: https://www.domaintools.com/resources/blog/finding-patterns-that-only-match-registered-domains-and-which-dont-overmatch-against-subdomains?utm_source=Social&utm_medium=Mastodon&utm_campaign=finding-patterns-that-only-match-registered-domains-and-which-dont-overmatch-against-subdomains

DomainTools, 4 months ago to random

@TalosSecurity with the help of Dutch Police obtained a decryptor the #Tortilla #ransomware operator provided to victims. Get the full story here: https://blog.talosintelligence.com/decryptor-babuk-tortilla/

DomainTools, 5 months ago to random

Many may already be using IPv6 and not yet know it. We share how to look up live IPv6 addresses for #domains using dig and passively collected AAAA records inside Farsight DNSDB. Learn more here: https://www.domaintools.com/resources/blog/ipv6-you-may-already-be-using-it?utm_source=Social&utm_medium=Mastodon&utm_campaign=ipv6-you-may-already-be-using-it

DomainTools, 5 months ago to Cybersecurity

Our own @neurovagrant was recently a guest on Infosec Institute's Cyber Work Podcast talking about paths for those who identify as neurodiverse in #cybersecurity and how colleagues can act as allies. Listen here: https://www.infosecinstitute.com/podcast/recruiting-and-nurturing-neurodivergent-professionals-in-cybersecurity--guest-ian-campbell/

DomainTools, 6 months ago to random

In honor of spooky season, @neurovagrant delves into themes and concepts from psychology and horror films and how they apply to cybersecurity. Read more here: https://www.domaintools.com/resources/blog/the-awe-and-horror-of-cybersecurity?utm_source=Social&utm_medium=Mastodon&utm_campaign=the-awe-and-horror-of-cybersecurity

DomainTools, 7 months ago to random

We've noted a noticeable uptick in #phishing and #smishing campaigns targeting the USPS. Using Iris Investigate and our integration with @maltegohq, we look at IOCs to better understand the scope of this campaign and a possible person of interest. https://www.domaintools.com/resources/blog/return-to-sender-a-brief-analysis-of-a-us-postal-service-smishing-campaign?utm_source=Social&utm_medium=Mastodon&utm_campaign=return-to-sender-a-brief-analysis-of-a-us-postal-service-smishing-campaign

DomainTools, 7 months ago to random

When we initially spoke with @da_667 prior to recording our @BreakingBadness episode, he was deep in a state of flow working on a blog post about #ZenRAT malware for @proofpoint. The full details are now available - find them here: https://www.proofpoint.com/us/blog/threat-insight/zenrat-malware-brings-more-chaos-calm

DomainTools, 8 months ago to random

@neurovagrant shares a recent experience of helping his father mitigate the security risks of losing a smartphone in a rideshare along with considerations for obtaining a new device. Get the full story here: https://www.domaintools.com/resources/blog/teach-your-parents-well-smartphone-security-and-aging-parents?utm_source=Social&utm_medium=Mastodon

DomainTools, 8 months ago to random

Next week @ColonelPanic at @gclef will show where the latest concentrations of bad domains are showing up—and what is changing. Hear them at #mWISE 2023. Register now! https://bit.ly/3ZcbRyg

DomainTools, 8 months ago to DEFCON

We couldn't resist - as part of #defcon 31, we participated in the Recon-Aacharva Challenge to find subdomains. Check out our methodology and contest results: https://www.domaintools.com/resources/blog/hunting-subdomains-at-def-con-31?utm_source=Social&utm_medium=Mastodon&utm_campaign=hunting-subdomains-at-def-con-31

DomainTools, 11 months ago to random

The latest DomainTools report is here examining patterns of domain creation across six features including TLD, IP and name server ASN, IP hosting country, domain registrar, and SSL certificate issuer. Some of the findings may surprise you: https://www.domaintools.com/resources/blog/the-domaintools-report-spring-2023?utm_source=Social&utm_medium=Mastodon&utm_campaign=the-domaintools-report-spring-2023