Threat actors are increasingly acquiring expired domains—known as "dropcatch domains"—to inherit their reputation and traffic, redirecting victims to scams and malware. According…
Shady Squirrel is a Russian-speaking threat actor active since at least July 2023, controlling over 700 domains. It sends fraudulent traffic to…
SocGholish is a malware campaign that regained access to thousands of compromised sites by teaming up with Shady Squirrel shortly after its…
A coordinated international law enforcement operation, supported by private sector partners including Bitdefender, Bitsight, ESET, and Microsoft, has successfully dismantled the criminal…
SocGholish is a malware loader that uses compromised WordPress sites to distribute payloads. It was disrupted in a separate action days before…