A cybercriminal gang known to researchers as Revolver Rabbit has registered over 500,000 domain names for use in infostealer operations against Windows and macOS machines.
To operate on such a massive scale, the threat actor leverages registered domain generation algorithms (RDGAs), an automated method that allows the rapid registration of several domain names.
RDGAs are similar to domain registration algorithms (DGAs) that cybercriminals use in malware to generate a list of potential places for communication between command and control (C2).
One way that the two differs is that although DGAs are implanted in malware strains and just a portion of the generated domains are registered read more about Revolver Rabbit gang registers 500000 domains for malware campaigns.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.