If you keep a close eye on the DNS abuse landscape, you’ve probably noticed a rise in malicious activity and abuse reports linked to Traffic Distribution Systems (TDS) — infrastructure that’s fast becoming a go-to tool for phishing and other malicious campaigns. Earlier this year, our peers at Infoblox shared over 100,000 domains tied to Vextrio, a threat actor group notorious for its extensive TDS use. Needless to say, those domains are listed on the Spamhaus Domain Blocklist 💪 ⤵️

❗Here's the latest Spamhaus DROP listings, from the worst of the worst IP traffic: 👉 SBL688496 - https://check.spamhaus.org/results?query=SBL688496 👉 SBL683400 - https://check.spamhaus.org/results?query=SBL688400 👉 SBL688345 - https://check.spamhaus.org/results?query=SBL688345 👉 SBL688338 - https://check.spamhaus.org/results?query=SBL688338 👉 SBL679050 - https://check.spamhaus.org/results?query=SBL679050 👉 SBL688313 - https://check.spamhaus.org/results?query=SBL688313 👉 SBL683028 - https://check.spamhaus.org/results?query=SBL683028 👉 SBL688302 - https://check.spamhaus.org/results?query=SBL688302 👉 SBL688281 - https://check.spamhaus.org/results?query=SBL688281

Go on… drop your spam in here. We dare you 🕷📬 #CreepItClean

Resharing a recent investigation for anyone who may have missed it the first time 👇 Back in April, we started tracking a sharp surge in phishing campaigns routed through residential proxy networks. Digging deeper, our analysis points to a persistent China-nexus threat actor focused predominantly on Japan 🇯🇵 Catch up on the full story, including what we’ve seen so far and what might come next 🕵️⤵️⤵️

Strengthening trust and safety across the internet | Spamhaus

#Phishing #Botnet #Spam #Cybercrime