IN THE NEWS

Infoblox research suggests bogus downloads, lookalike brands, and fake reviews are helping build global supply chains for criminal internet traffic.

Infoblox announced today that it has entered into a definitive agreement to acquire Kentik, combining Infoblox’s authoritative DNS, DHCP, and IP address management (IPAM) data with Kentik’s network observability platform. Financial terms were not disclosed.

Infoblox Threat Intel has uncovered a sophisticated cybercriminal operation, dubbed Lurking Lizard, that uses fake 7-Zip software downloads to build a global network of compromised residential proxies. The research reveals that what initially appeared to be a single malware campaign is part of a much larger criminal infrastructure spanning more than 230 malicious domains.

If you've spent any time on Meta's Threads app in the last year, then you've likely seen what I like to call "the Mr Beast reply guys:" A spam account replies to a popular post with a nonsensical phrase and a low-quality screenshot of the British newspaper The Times featuring a fictitious story about Mr Beast.

Every phone call once went through a human operator: trusted, essential, and an obvious single point of failure. DNS, or the Domain Name System, is the internet’s switchboard equivalent. In Singapore and across Asia-Pacific, it facilitates web traffic. Every device asks DNS for directions before connecting to anything. Without it, nothing works. With it compromised, nothing is safe.

DCloud Uni-App scam infrastructure is driving a new wave of cyber fraud that is increasingly affecting businesses, according to new research from Infoblox Threat Intel. The findings reveal that a Chinese app framework has been used to create hundreds of thousands of scam websites, extending the impact of consumer fraud into enterprise environments.

Cybercriminals are capitalizing on football fever by pushing illegal streaming platforms and uncertified TV boxes that promise “free, unlimited access” to every match.

Joint cyber operations are increasingly becoming the preferred response to sprawling malware ecosystems, as governments and private firms pool intelligence, infrastructure, and enforcement power to disrupt criminal supply chains at multiple points at once.

Europol announced Wednesday the recovery of approximately 27 million stolen login credentials and the seizure of more than €41 million (roughly $47 million) in criminal cryptocurrency as part of the latest phase of Operation Endgame, the two-year multinational campaign to dismantle the malware infrastructure behind the world's ransomware economy.

Microsoft, Europol, and international partners have disrupted infrastructure used by the Amadey and StealC malware operations as part of Operation Endgame, which targets cybercriminal services and ransomware gangs.