Security Research Articles

Information security is a rapidly changing, dynamic field with new attacks, breaches, technologies and vulnerabilities sprouting daily. And with such an influx of information, facts can be overlooked. Research and deeper investigation into these topics, however, can help us identify further potential threats while improving situational awareness, attack attribution and even defenses against future attacks.

In the “Research” category, we show you how SecurityTrails tools can help uncover what’s beneath the surface of controversial websites, malware, cybercrime campaigns, data breaches and bugs that make the headlines.

One of our earliest research projects here is a look into how you can track and trace websites who promote violence and other illegal activities (such as The Daily Stormer) through their DNS records. Among our later explorations, you’ll see our looks at malicious domain campaigns in the wake of hurricane Florence, cryptojacking campaigns, shutting down 8chan and, of course, our Recon Safari series.

Blast Radius: Mapping, Controlling, and Exploiting Dynamic Self-Registration Services.
SecurityTrails Blog · Aug 24 · by Ken Pyle

Blast Radius: Mapping, Controlling, and Exploiting Dynamic Self-Registration Services

Vendors such as Datto, GeoVision, Synology and others leverage and depend on self-registered services for their products. These devices frequently leak critical data or have insecure design, unintentional or even intentional design decisions and application flaws. Through insecure network design and installation practices, they can be easily mapped, discovered and attacked by cyber criminals via insecure vendor, software and integrator practices.

Recon Safari #4: Domains Riding the Robinhood Wave.
SecurityTrails Blog · Feb 23 · by SecurityTrails team

Recon Safari #4: Domains Riding the Robinhood Wave

During the past couple of weeks, the popular free financial trading app Robinhood made headlines for halting purchases of certain stocks. This has resulted in a lot of bad publicity for the company. And because threat actors enjoy exploiting trending news topics to their advantage, we decided to look at newly registered Robinhood domains to see how they’re being used.

Iran, the IRGC and Fake News Websites.
SecurityTrails Blog · Dec 17 2020 · by SecurityTrails Team

Iran, the IRGC and Fake News Websites

Recently, the Department of Justice made two public announcements about shutting down fake news websites created by Iran’s Islamic Revolutionary Guard Corps (IRGC). In the first instance, 92 domains were seized in August 2020. And according to the second announcement, 27 more domains were seized as part of the same effort to spread global disinformation.

Recon Safari #1: A Closer Look at Friendemic’s Data Breach.
SecurityTrails Blog · Oct 19 2020 · by Sara Jelen

Recon Safari #1: A Closer Look at Friendemic’s Data Breach

We’ve been having some Friday fun running SecurityTrails Recon Safari on Twitter. Over the past few months, we’ve conducted over 30 successful investigations that were easy to research thanks to SecurityTrails API™ and SurfaceBrowser™. And as a result, Recon Safari began in the form of long Twitter threads, eventually evolving into fun and digestible infographics, ultimately followed by a writeup on our blog.

Finding Coronavirus Malicious Domain Names.
SecurityTrails Blog · Mar 31 2020 · by Nicolas Pence

Finding Coronavirus Malicious Domain Names

The coronavirus outbreak (COVID-19) is arguably one of the most widely publicized events of the century. Information surrounding this pandemic has been incredibly spare, provoking a true “infodemic” through the spread of unhelpful related content like jokes, doubtful home prevention treatments and viral fake videos, along with useful and accurate information as well.

  • 1
  • 2