Infoblox Archives • Daily CyberSecurity

Inside the Global “MaaS” Engine of the K99 Scam Compound

Inside the Global “MaaS” Engine of the K99 Scam Compound

Do Son April 14, 2026

Infoblox uncovers the K99 compound: a brutal MaaS operation using human trafficking to power biometric hijacking and global Android banking fraud.

Vibe-Coded Fraud: How AI Deepfakes and Digital ‘Cloaking’ Bypass Security to Drain Bank Accounts AI-Generated Scams Digital Cloaking

Vibe-Coded Fraud: How AI Deepfakes and Digital ‘Cloaking’ Bypass Security to Drain Bank Accounts

Do Son March 24, 2026

Infoblox and Confiant reveal a global operation using generative AI deepfakes and commercial "cloaking" tools to scale high-fidelity investment scams.

The Invisible Trap: How Hackers Weaponize the Internet’s Root Infrastructure (.arpa) to Bypass Security Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT

Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT

The Invisible Trap: How Hackers Weaponize the Internet’s Root Infrastructure (.arpa) to Bypass Security

Do Son March 3, 2026

Infoblox uncovers a novel phishing tactic abusing the .arpa TLD. Attackers hijack internet "plumbing" to bypass firewalls and deliver brand-impersonation scams.

Sitting Ducks and Scammy Notifications: Inside a Global Malvertising Operation Sitting Ducks Vulnerability Push Notification Scam

Sitting Ducks and Scammy Notifications: Inside a Global Malvertising Operation

Do Son January 19, 2026

Infoblox researchers hijacked a scam network using the "Sitting Ducks" DNS flaw. 57M logs reveal how abandoned domains fuel global push notification spam.

Pig Butchering-as-a-Service: How “Penguin” Industrialized Global Fraud Pig Butchering-as-a-Service (PBaaS) Crypto Fraud Economy

Pig Butchering-as-a-Service: How “Penguin” Industrialized Global Fraud

Do Son January 12, 2026

Infoblox exposes the "Pig Butchering-as-a-Service" economy. Providers like Penguin and UWORK sell turnkey fraud kits to automate scams globally.

Detour Dog: Stealthy DNS Malware Uses TXT Records for Command and Control NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club

NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club

Detour Dog: Stealthy DNS Malware Uses TXT Records for Command and Control

Do Son October 2, 2025

The Detour Dog campaign is using DNS TXT records for stealthy C2, infecting thousands of websites and quickly shifting infrastructure to evade sinkholing efforts.

Unmasking VexTrio: A 15-Year Cybercrime Empire of Scams, Spam, and Fake Apps VexTrio, cybercrime syndicate

Unmasking VexTrio: A 15-Year Cybercrime Empire of Scams, Spam, and Fake Apps

Do Son August 14, 2025

A new report from Infoblox reveals the shocking scale of VexTrio, a 15-year-old cybercrime syndicate that profits from a massive network of scams and fake apps.

VexTrio Exposed: Infoblox Uncovers Massive Malicious Adtech Ecosystem Powering Global Malware VexTrio, Malicious Adtech

VexTrio Exposed: Infoblox Uncovers Massive Malicious Adtech Ecosystem Powering Global Malware

Do Son June 16, 2025

Infoblox unmasks VexTrio, a sprawling malicious adtech ecosystem intertwined with DNS-based malware campaigns and global website compromises, fueled by commercial operators