Talos Discovery Spotlight: Hundreds of Thousands of Google Apps Domains’ Private WHOIS Information Disclosed
Summary: Cisco Talos reported that private WHOIS information for hundreds of thousands of Google Apps domains was disclosed, with records previously under privacy protection updated to show registrants' actual names, physical addresses, emails, and phone numbers. Talos identified affected domains linked to malicious activity, including federalbureauinvestigations.com and hfcbankonline.com, both with very poor web reputation scores.
Bottom line: The unmasked records remain available to anyone with access to a cached WHOIS database, and Talos notes threat actors can use names, addresses, and phone numbers in targeted spear phish emails to make them seem more authentic.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026