Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Security researchers say they identified 10 suspicious domain names weeks before they were registered, then watched the addresses become active as disposable gateways to an AliExpress-themed phishing operation.
Summary
EfficientIP Research Labs said the. cyou domains were identified on June 9 and added to its DNS Threat Pulse intelligence feed. The addresses were registered and began resolving to internet protocol addresses on July 2, allowing investigators to connect […] The article Researchers trace phishing domains before AliExpress campaign appeared first on Arabian Post .
This is a brief wire summary — the full story (linked below) has the complete details.
KazaSec's take
Phishing and credential-based attacks succeed because they target people, not just infrastructure — technical controls like SPF, DKIM, and DMARC only ever close part of that gap. The rest comes down to whether a team can actually spot the fake, and whether a compromised credential can still be reused anywhere else.
Coverage details
We've archived 171 other articles touching the same topic (cybersecurity) — see the full security news archive.
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.