Forest Global Training Partners

Cyber Risks · Krebs on Security

.US Harbors Prolific Malicious Link Shortening Service

Summary: Infoblox researchers say a three-year-old malicious link shortening service they call "Prolific Puma" has registered thousands of short domains, mostly three to seven characters long, on bulletproof hosting that ignores abuse complaints, and since May 2023 about 55 percent of its new domains have used .US, with several dozen registered daily. Interisle Consulting examined six million phishing reports from May 2022 to April 2023 and identified roughly 30,000 .US phishing domains, some registered to attack Bank of America, Amazon, Apple, AT&T, Citi, Comcast, Microsoft, Meta and Target, while Infoblox found more than 2,000 malicious .US shortener domains registered through NameSilo since October 2023 that had been converted to private registrations.

What you should know: The NTIA has proposed letting registrars redact all registrant data from .US WHOIS records, and industry groups opposing it say that would remove the last accountability for a domain already carrying about 30,000 phishing domains in a single year.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related