DomainTools

Book a meeting with DomainTools at RSA Conference and: 🔹 Learn how security teams can integrate advanced domain intelligence to optimize the effectiveness of various functions within the security organization, including threat intelligence, forensics and incident response, threat hunting, phishing and fraud protection, and brand protection 🔹Walk away with this awesome Bento box, Anker phone charger, and lunch cooler Book your meeting here: https://lnkd.in/gpaWymjd #RSAC #ThreatIntelligence #CyberSecurity #Phishing #BrandProtection #IncidentResponse

A special thank you to our Gold CYBERTACOS® RSAC sponsor DomainTools! For over 20 years, DomainTools has been the global leader for Internet intelligence that enables security practitioners to proactively defend their organization in a constantly evolving threat landscape. Join the team during this year’s RSA Conference at Spaces Mission & 3rd (across from Moscone) to learn more about how DomainTools can help you identify external risks, optimize your resources and stop attacks before they happen. Learn more here: https://lnkd.in/gW_t6a7j. Make sure you register to join us and the DomainTools team at the event: https://lnkd.in/esG56P82. All the CYBERTACOS happenings are from 6 p.m. to 9:30 p.m. PT on Monday, April 28. You must have pre-approved registration.

Fresh 🌶️🌶️ research from my team at DomainTools Investigations just posted: While researching malicious domains hosted on Proton66, we stumbled upon a fake cybersecurity website purporting to be a legit antivirus service. In and of itself, that’s nothing new (I remember investigating FakeAV sites in the early aughts). But we decided to go down that rabbit hole for the fun of it, because that’s how we roll. We found an operation that’s likely the work of an emerging threat actor who goes by the handle Coquettte (yes, with three “T”s) - an amateur cybercriminal leveraging Proton66’s bulletproof hosting to distribute malware and engage in other illicit activities. Read the full analysis here: https://lnkd.in/gdQ9CZUD

Hello! If you are a security researcher or practitioner attending RSA Conference this year and would like to be on the Breaking Badness Cybersecurity Podcast - fill out this Google Form and let me know! I have a few themes I'd like to speak to, so check the boxes which you'd like to discuss and I will be in touch with booking details! Previous guests of the podcast include: 🔸 Allan Liska 🔸Tracy Z. Maleeff 🔸Tanya Janca 🔸Jon DiMaggio 🔸Jason Haddix 🔸Lesley Carhart 🔸and more!

DomainTools Investigations shared their latest research today, revealing how Proton66 - a bulletproof hosting network - is aiding cybercrime. The analysis focuses on the threat group known as “Coquettte” (note the three “Ts”) and their ties to the Horrid hacking group. The groups’ usage of bulletproof hosting plus accessible malware toolkits lowers the bar for entry into cybercrime, meaning even more amateur actors can pose more of a threat. Stay aware of Proton66’s network activities and monitor IOCs noted in the analysis found here: https://lnkd.in/gEjfyCtt

DomainTools Investigations’ latest research analyzes Proton66, a bulletproof hosting network enabling cybercrime operations, serving as a hub for aspiring cybercriminals. It focuses on threat actor Coquettte and their ties to the Horrid hacking group, a loosely organized cybercriminal collective fostering amateur threat actors. The combination of a bulletproof hosting haven and accessible malware toolkits lowers the bar for entry into cybercrime, meaning even minor actors can pose a risk to organizations. By staying aware of the Proton66 network’s activities and aggressively monitoring for the IOCs and techniques, security teams can bolster their defenses against this breeding ground of emerging threats. Read the full analysis here: https://lnkd.in/gb7QsgHH Find IOCs on GitHub: https://lnkd.in/gGYfVErA #ThreatIntelligence #CyberSecurity #Malware

In 1 hour at FIC! Maxime Zielony will share his presentation, "Discovered by Design," a walk through his decade-long journey of creating UX implementations using DomainTools Iris Intelligence to find malicious infrastructure quickly and make connections that may have historically been overlooked. Find us in stand E19

It's that magic time of year again... RSA Conference Time! DomainTools will be attending RSAC 2025 in San Francisco from April 28th to May 1st! Join us at Spaces Mission & 3rd to learn how our threat intelligence solutions are powered by comprehensive data analysis and innovative research methodologies. See how we can help your organization stay ahead of emerging threats with actionable intelligence. Get your hands on some of our sweet, sweet DNS data. Looking forward to connecting with everyone there! https://lnkd.in/g3gM89p9

It's that time of year already! If you’re headed to San Francisco for the RSA Conference, start your planning now and come meet the DomainTools team! We’ll be at Spaces Mission & 3rd (across from Moscone Center) during the week and hosting a Happy Hour with Andesite (4/29). We are sponsoring CYBERTACOS® hosted by W2 Communications(4/28), and hosting a Community Closed Door Session(TLP:RED)(4/29). Meet our Executive and Technical experts, including Timothy Chen, Brian de Lemos, Daniel Schwalbe, and Brendan O'Connell. Schedule time to chat with us at #RSAC2025, stop by our hospitality center, or sign up for our Happy Hour and learn more about how DomainTools can help you identify external risks, optimize your resources, and stop attacks before they happen. Let's (re-)Connect! https://lnkd.in/epjqEb78

In this special DNS Masterclass episode of Breaking Badness, hosts Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce take a deep dive into the Domain Name System (DNS) often dubbed the backbone and battleground of the Internet. From its humble beginnings with host files to its critical role in modern security, the episode unpacks DNS’s evolution, vulnerabilities, and impact on Infosec. Listen here: https://lnkd.in/gEyBA2be #DNS #CyberSecurity #Infosec