Swapneel Patnekar
Open Resolvers: Understanding security risks and best practices
—
by
An “open resolver” is a DNS server that accepts and resolves a domain name recursively for anyone on the internet. In this blog post, we will share the security risks of open resolvers and best practices. At the time of writing, there were 192920 open resolvers in India with recursion enabled. While most of these…
LK domain name abused by threat actors
—
by
Before we deep dive into how attackers target .lk domains using domain shadowing attack, first, a primer on registration of a domain name under .lk namespace. tl;dr registration of a domain name under .lk namespace is regulated The domain registration policy says the LK registry may ask for documents supporting the request for a domain…
Phishing targeting HDFC Bank customers
—
by
Security researchers at Shreshta IT, using our threat intelligence platform SDINET, have identified a phishing website and Android app targeting HDFC Bank customers. About HDFC Bank Limited HDFC Bank Limited is an Indian banking and financial services company headquartered in Mumbai. It is India’s largest private sector bank by assets and world’s 10th largest bank…
Phishing campaign targeting Github
—
by
Earlier this week, on 21st September, GitHub published a blog post – Security alert: new phishing campaign targets GitHub users The gist of it was, On September 16, GitHub Security learned that threat actors were targeting GitHub users with a phishing campaign by impersonating CircleCI to harvest user credentials and two-factor codes. While GitHub itself…
Phishing Campaign – Adidas and Nike
—
by
Shreshta threat intelligence team has detected a phishing campaign wherein the threat actors have registered domain names impersonating brands such as Adidas and Nike. Adidas AG is a German multinational corporation, founded and headquartered in Herzogenaurach, Bavaria, that designs and manufactures shoes, clothing and accessories. It is the largest sportswear manufacturer in Europe, and the…
