Infoblox Threat Intel

23 min read

• cloaking
• Confiant
• cryptotheft
• cybercrime
• cybercriminals
• DNS
• Infoblox
• Infoblox Threat Intel
• Keitaro
• lookalike
• malvertising
• phishing
• scams
• TDS
• threat actors
• tracker
• Traffic Distribution System

No Reach, No Risk: The Keitaro Abuse in Modern Cybercrime Distribution

Infoblox March 26, 2026

Authors: Infoblox Threat Intel and Confiant Executive Summary Recently...

Read More

16 min read

• advertising tracker
• AI
• cloaking
• cybercrime
• cybercriminals
• DNS
• Domain Cloaking
• Infoblox Threat Intel
• investment scams
• Keitaro
• malvertising
• performance tracker
• scams
• TDS
• threat actors
• Traffic Distribution System

Inside Keitaro Abuse: A Persistent Stream of AI-Driven Investment Scams

Infoblox March 19, 2026

Executive Summary Cloaking—the act and art of hiding a...

Read More

9 min read

• cybercrime
• hijacked CNAME
• Infoblox Threat Intel
• phishing
• reverse DNS
• scam
• TDS
• Threat hunting
• Threat Intelligence
• Threat Research

Abusing .arpa: The TLD That Isn’t Supposed to Host Anything

Infoblox February 26, 2026

Phishing email campaigns are so common that it takes...

Read More

14 min read

• AI
• Asia
• cyber crime
• Cyber Threats
• DNS
• Domain Name System
• Infoblox Threat Intel
• Japan
• lookalikes
• malvertising
• pig butchering
• RDGA
• scam
• Threat Intel

Banners, Bots and Butchers: An Automated Long Con Targeting Japan, Asia, and Beyond

Infoblox February 17, 2026

Executive Summary Over the past few months, we investigated...

Read More

8 min read

• adtech redirects
• affiliate advertising
• botnet
• compromised routers DNS
• DNS hijack
• DNS malware
• Infoblox Threat Intel
• TDS
• Threat Intelligence
• Traffic Distribution System

Compromised Routers, DNS, and a TDS Hidden in Aeza Networks

Infoblox February 3, 2026

When most people say DNS, they are thinking about...

Read More

23 min read

• affiliate advertising
• brand impersonation
• digital fraud
• DNS
• DNS misconfiguration
• Domain Hijacking
• Infoblox Threat Intel
• lame delegation
• push notification
• scam
• Sitting Ducks
• TDS

Inside a Malicious Push Network: What 57M Logs Taught Us

Infoblox January 15, 2026

Who doesn’t love to eavesdrop onto a juicy conversation?...

Read More

6 min read

• aisuru botnet
• android malware
• DDoS
• DNS
• enterprise exposure
• Infoblox Threat Intel
• kimwolf botnet
• proxy endpoints
• residential proxy

Kimwolf Howls from Inside the Enterprise

Infoblox January 13, 2026

On January 2nd, new research revealed that the tremendous...

Read More

13 min read

• APAC
• Asia
• Cambodia
• China
• crime-as-a-service
• crypto
• cyber crime
• cyber economy
• cyber fraud
• financial fraud
• fraud
• human trafficking
• Infoblox Threat Intel
• Mekong
• money laundering
• organized crime
• pig butchering
• scam center
• scam centre
• scam compound
• sha zhu pan
• Southeast Asia
• telegram
• Threat Intel

Scaling the Fraud Economy: Pig Butchering as a Service

Infoblox January 8, 2026

Authors: Maël Le Touz and John Wòjcik Introduction: Flooding...

Read More

20 min read

• direct search abuse
• DNS
• domain parking
• Infoblox Threat Intel
• malvertising
• Malware
• parked domain
• scam
• TDS
• Threat Intelligence
• Threat Research
• Traffic Distribution System

Parked Domains Become Weapons with Direct Search Advertising

Infoblox December 16, 2025

Executive Summary Just how dangerous is a parked domain?...

Read More

7 min read

• DNS
• DNS-based phishing detection
• Evilginx AITM phishing
• Evilginx attack detection
• Evilginx evasion techniques
• Evilginx phishing
• Evilginx Pro features
• Evilginx reverse proxy phishing
• Infoblox Threat Intel
• MFA attack
• SSO attack

DNS Uncovers Infrastructure Used in SSO Attacks

Infoblox December 1, 2025

We recently received a tip from a customer that...

Read More