IN THE NEWS

CAPTCHAs, the simple tests we use to prove we are human, are increasingly being weaponized to trigger actions with hidden costs. Infoblox Threat Intel has uncovered fake CAPTCHA pages that trick users into sending high volumes of international text messages, fuelling a long-running fraud category called international revenue share fraud (IRSF). The result is unexpected charges for consumers and growing, often hidden, revenue leakage for telecom carriers.

The release of NIST SP 800-81 Revision 3 marks a turning point in how organizations must think about DNS. Once treated as a background utility, DNS is now recognized as a critical layer of cybersecurity, resilience, and even future AI-driven infrastructure.

Cybersecurity professionals at SecureWorld Boston had a lot to say about identity management, AI threats and the challenges they face in achieving real-time visibility.

For years, the scam compounds of Southeast Asia have occupied an uncomfortable space in the global conversation about cybercrime: widely reported, frequently condemned by the United Nations, and yet frustratingly difficult to connect to specific acts of digital theft.

New research by Infoblox Threat Intel and Vietnam’s Chong Lua Dao identified an Android banking trojan likely operated from multiple locations, including Cambodia’s K99 Triumph City—previously flagged by the UN for large-scale scams and forced labour.

For the first time, investigators have traced spyware to its physical origin—revealing new types of duplicity

For the past few years, it’s escaped no one that levels of Internet and telephone fraud have skyrocketed. One in four adults worldwide lost money to scams last year, according to the Global Anti-Scam Alliance NGO, while 13% encountered an attempted scam at least once a day. Globally, over $1 trillion is lost to online fraud annually in what the U.N. has dubbed a “scamdemic.”

Infoblox Threat Intel and the Vietnamese nonprofit Chong Lua Dao tracked down the Android banking Trojan. This followed a spike in anomalous DNS traffic across Infoblox customer networks. It led to a previously undocumented malware-as-a-service platform.

Sitting in his dorm room at the Rochester Institute of Technology, Benjamin Brundage was closing in on a mystery that had even seasoned internet investigators baffled. A cat meme helped him crack the case.

Craig Sanderson from Infoblox dives into the newly finalized NIST SP 800-81 as it marks a pivotal shift in DNS security, emphasizing resilience through modernized practices tailored for today’s distributed, cloud-driven, and threat-laden environments.