Threat Intelligence

Tracking Malicious Infrastructure Of the Vultur Banking Trojan.

Identifying malicious infrastructure through hardcoded TLS Certificates and Subdomains.

Finding phishing domains passive DNS tooling and 302 redirects.

Leveraging Passive DNS to identify APT infrastructure. Building on public intelligence reports.

Malware Infrastructure Tracking Using Passive DNS Intelligence.

Identifying malware infrastructure with the FOFA scanner.

Catching 83 Qakbot Servers using Regular Expressions.

Creating Regex Signatures on TLS Certificates with Censys.

Refining Queries and Identifying Suspicious servers using Censys.