Infoblox Threat Intel has uncovered a sophisticated adversary‑in‑the‑middle (AiTM) phishing campaign in which attackers sit invisibly between users and their login pages. They’re not guessing passwords or cracking MFA; they wait for authentication to succeed, then hijack the live session.Read More…
New research from Infoblox Threat Intel shows that parked domains – long treated as harmless and forgotten ad pages – have become a reliable tool for malicious actors. In large‑scale experiments, over 90% of visits to parked domains redirected the visitor to scams,Read More…
Infoblox Threat Intel (ITI), together with the United Nations Office on Drugs and Crime (UNODC), has linked BBIN aka Baoying Group, one of Asia’s largest iGaming providers, through interlocking corporate ownership structures and affiliations to cyber-enabled fraud,Read More…
Subdomain hijacking through abandoned cloud resources is an issue that probably every major organization has experienced, and these attacks are on the rise. Infoblox Threat Intel has tracked some of this activity to a threat actor, dubbed Hazy Hawk,Read More…
Infoblox Threat Intel has uncovered a highly sophisticated Phishing-as-a-Service (PhaaS) platform that poses a significant threat to businesses globally. The threat actor behind these campaigns, dubbed “Morphing Meerkat”, creatively employs DNS mail exchange (MX) recordsRead More…
