A global leader for internet #intel that enables security practitioners to proactively defend their organization in a constantly evolving threat landscape.
Seattle
Joined June 2009
- Tweets7.3K
- Following1.2K
- Followers13.4K
- Likes1.9K
DomainTools retweeted
🚨 Iranian hackers are attacking Israeli networks with a new tool called MuddyViper.
The group MuddyWater used fake emails and VPN bugs to break into systems in tech, transport, and utilities.
MuddyViper can steal passwords, browser data, and control infected computers — while pretending to be the Snake game.
Read more → thehackernews.com/2025/12/ir…
DomainTools retweeted
Huge thanks to our amazing sponsors:
Platinum - jackiesinsecurity, @DomainTools
Gold - @Miscreants, Write Alchemist, @NinjaProxyHQ
Silver - Punch, @Ember_OT, @DianaInitiative, @HackersHealth
Space is limited, so register today at soberincyber.org/events-1/so…
DomainTools retweeted
ICYMI: Skeleton Spider (FIN6) is using trusted cloud services like AWS to deliver malware via fake resumes & job lures. Social engineering meets stealthy infrastructure. Learn more here: dti.domaintools.com/skeleton…
DomainTools retweeted
FIN6 hackers pose as job seekers to backdoor recruiters’ devices - @billtoulas
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
DomainTools retweeted
FIN6 (Skeleton Spider) is using AWS & fake resumes to deliver malware via trusted job platforms.
⚠️ Realistic lures
🕵️♂️ Cloud-hosted phishing
🥚 More_eggs backdoor
Read the full analysis here: dti.domaintools.com/skeleton…
DomainTools retweeted
🚨 Watch your clipboard!
A fake DocuSign site tricks users into running malware with a sneaky PowerShell script—copied via CAPTCHA.
✔️ Clipboard poisoning
✔️ Fake Gitcode & DocuSign sites
✔️ NetSupport RAT deployed
👀 Learn how it works → thehackernews.com/2025/06/fa…
DomainTools retweeted
DomainTools Investigations’ (DTI) latest analysis uncovers a technically sophisticated malware campaign that uses fake CAPTCHAs and spoofed document verification pages to trick users into self-infecting their machines with the NetSupport RAT.
dti.domaintools.com/how-thre…
DomainTools retweeted
I bet they aren't even thinking about #BSidesNoVA like I am.
#CFP information coming soon ⌛
Friday, October 10th
Saturday, October 11th
Arlington, Virginia
bsidesnova.org/
ALT Cartoon man in corner at a party while cartoon people dance around him. His thought bubble is the Security BSides Northern Virginia logo with October 10-11.
DomainTools retweeted
ICYMI!
Ian Campbell's latest Recommended Reading list is out. This edition features @MaltegoHQ's Human Element Podcast hosted by @bapril!
Learn more and see Ian's other Recommended picks here: dti.domaintools.com/cybersec…
DomainTools retweeted
🚨 Hackers built a fake Bitdefender site to push Venom RAT—stealing passwords, crypto, and control.
Behind it? A stealthy combo of open-source tools, MFA bypass tricks, and real-time phishing tactics. You won’t believe what they’re exploiting now.
Read: thehackernews.com/2025/05/cy…
DomainTools retweeted
@DomainTools Crooks use a fake #antivirus site to spread #Venom #RAT and a mix of malware
securityaffairs.com/178366/m…
#securityaffairs #hacking #malware
DomainTools retweeted
A spoofed antivirus download page is delivering VenomRAT, StormKitty, and SilentTrinity—a powerful combo for credential theft, persistence, and long-term access.
Full breakdown: dti.domaintools.com/venomrat…
#CyberSecurity #ThreatIntel #MalwareAnalysis #Infosec
DomainTools retweeted
Warning! Malicious Chrome extensions found mimicking legit tools
pcworld.com/article/2791519/…
pcworld.com/article/2791519/…
DomainTools retweeted
A new report by DomainTools details a "massive, ongoing campaign of malicious Chrome extensions".
#Chrome #Google #cybersecurity #malicious #datasecurity cnews.link/hundred-chrome-ex…
DomainTools retweeted
🚨 Over 100 malicious Chrome extensions slipped through Google’s radar since Feb 2024.
They looked legit—VPNs, AI tools, banking apps—but secretly stole data, hijacked sessions, and redirected traffic.
👀 Even bad reviews were filtered.
🔗 Read: thehackernews.com/2025/05/10…
DomainTools retweeted
Since Feb 2024, over 100 fake Chrome extensions & sites have been stealing data, hijacking sessions & injecting malicious code.
Learn more here: dti.domaintools.com/dual-fun…
DomainTools retweeted
Since 5/12, we tracked 389+ suspicious domains mimicking Spotify targeting tech job-seekers amid a surge in job scams.
These domains show tight clustering across 7 metrics, suggesting a coordinated campaign.
domaintools.com/resources/bl…
DomainTools retweeted
From the LA wildfires to AI tech breakthroughs, viral events dominate the news cycle—and cybercriminals are quick to exploit them. 🧵
dti.domaintools.com/scams-ma…
DomainTools retweeted
🚨 Cybercrime is getting easier.
🔍 New research dives into Morphing Meerkat (phishing-as-a-service using DoH) & Proton66 (bulletproof host for amateurs). Low-skill actors now launch pro-level attacks—no coding needed. @DomainTools
DNS monitoring & user training are more crucial than ever.
More：domain.news/inside-morphing-…
#cybercrime #phishing #MorphingMeerkat #Proton66 #infosec
DomainTools retweeted
April was a busy month for us! Here's a recap of research we shared:
Where to Find Aspiring Hackers (focusing on Proton66, a bulletproof hosting network)
dti.domaintools.com/proton66…