IN THE NEWS

A threat actor known as Hazy Hawk has been observed hijacking abandoned cloud resources of high-profile organizations, including Amazon S3 buckets and Microsoft Azure endpoints, by leveraging misconfigurations in the Domain Name System (DNS) records.

After a long hiatus, the federal agency updated Domain Name Sever (DNS) recommendations around protecting the network and the DNS protocol itself, say Scott Harrell and Mukesh Gupta of Infoblox.

Cybersecurity researchers have lifted the lid on two threat actors that orchestrate investment scams through spoofed celebrity endorsements and conceal their activity through traffic distribution systems (TDSes).

US$ 5.7 billion – that is how much money U.S. consumers reported losing to investment scams in 2024. For context, that is enough to fund five Mars rover missions.

Threat research has delved into their modus operandi involving two pathways: evasive social media investment scams and news spoofing and falsification.

Infoblox’s latest research exposes two advanced scam actors using RDGAs to evade detection and exploit global victims.

Cyberfraud campaigns, named “Reckless Rabbit” and “Ruthless Rabbit,” have been uncovered using social-engineering tactics to deceive victims into providing sensitive information under the pretence of high-return investment schemes.

A pair of cyberfraud scams were uncovered using social-engineering tactics to trick victims into handing over sensitive data under the guise of an investment plan.

The convergence of cybercrime, financial fraud, and organized crime poses a significant threat, especially where these syndicates excel at operating under the radar.

New products showcase the integration of Infoblox’s Universal DDI and Google WAN Cloud to address challenges in hybrid, multi-cloud networking cloud and cybersecurity.