A sophisticated distribution architecture has been used to hijack over 8,000 domains and 13,000 subdomains that belong to reputable businesses and institutions to proliferate spam and monetize clicks.
Under the moniker SubdoMailing, Guardio Labs has been monitoring the coordinated malicious behavior since at least September 2022. “Counterfeit package delivery alerts to outright phishing for account credentials” is the range of emails that are sent out.
The campaign was credited by the Israeli security company to a threat actor named ResurrecAds, which is known to revive dormant domains belonging to major brands or associated with them to manipulate the digital advertising ecosystem read more 8000+ Domains of Trusted Brands Hijacked for Massive Spam Operation.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.