Leaked documents from Chinese security firm Knownsec reveal an offensive intelligence contractor serving China's military and security apparatus. Discover how their tools, targeting strategies, and global infrastructure expose the PRC's state-aligned cyberespionage operations.

DNSDB Scout v2.5.9 is here — with seamless Iris Investigate pivoting, cleaner copy-paste formatting with bracket defanging, and new export options to streamline your DNS investigations.

Cybersecurity researchers have uncovered a growing cluster of fraudulent domains impersonating major streaming networks like ESPN, CBS, and Peacock — targeting sports fans during TV activation. Learn how to spot these scams and protect yourself.

Learn key insights from a report conducted by the Ponemon Institute, which surveyed 1,027 IT and IT security practitioners in the US and UK who participate in recruiting,

SIE Batch debuts at RSA Conference next week. Learn how SIE Batch makes it easier to consume real-time data for security investigations.

In part 1 of this 3-part blog series, we’ll delve Cyber Incident Response Planning and how to address and manage the repercussions of a cyberattack or incident.

Drop into the Warzone of RAT Malware. A continually changing field of phishing scams, malware authors, victims, and defense strategies. Read on to find out more.

Joe St Sauver explains the benefits of searching A, AAAA, CNAME and other DNS records in DNSDB

Discover domains of interest in our SIE Channel 212, Newly Observed Domains, to fight scams, misinformation, and more

Leverage DomainTools APIs for enrichment of domains with Domain Risk Score, domain, DNS, and SSL certificate data to surface malicious activity.

How DNS abuse plays a key role in online counterfeiting

We are proud to announce Domain Hotlist, a predictive, prioritized, and easily consumable block list that identifies active, high-risk domains—empowering organizations.

The new Demisto Iris App brings contextual DNS intelligence from DomainTools Iris to Demisto.

What is the difference between Newly Observed Domains and Newly Registered Domains? Joe St Sauver explains all of this and more in this illuminating article.

Learn how to use our SIE Batch API in Ruby, Python, Perl and C

In this 3-part blog series, we’ll delve into phishing and take a look at how you can protect yourself by deploying a strategy of threat protection for your comp

Last year, Japanese authorities reported a sophisticated and aggressive phishing campaign using websites spoofing Sagawa Express Co., a major shipping and logistics compa

Paul Asadoorian takes a walk down cyber security lane by investigating a phishing campaign for bank details. From code analyzing, domain identyfying, to blocking domains.

Join Senior Security Advisor, Corin Imai, for an investigation into known bad domains. In this blog, learn how to map connected infrastructure to expand from one indica

As stated in our previous blogs, phishing messages rely on social engineering. Security awareness for all employees is key when it comes to protecting against phishing.

Phishing remains a leading cyberattack during tax season and beyond

Now that the team is in place, it’s time to build out your IR plan. Remember, a strong IR plan helps you to both prepare and prevent security incidents.

Catching cyber culprits will always be a cat and mouse game, read this blog to learn 10 tips for web asset fingerprinting, and stay a step ahead of attackers.

The security research team at DomainTools recently observed an uptick in suspicious Coronavirus and COVID-19 domains, leading them to discover CovidLock, a malicious Andr

Learn how top data journalists keep data diaries for their investigations