Tag: dns

  • Open Resolvers: Understanding security risks and best practices

    Open Resolvers: Understanding security risks and best practices

    —

    by

    Swapneel Patnekar

    An “open resolver” is a DNS server that accepts and resolves a domain name recursively for anyone on the internet. In this blog post, we will share the security risks of open resolvers and best practices. At the time of writing, there were 192920 open resolvers in India with recursion enabled. While most of these…

  • Threat actors targeting Indian citizens

    Threat actors targeting Indian citizens

    —

    by

    Pranay Patil

    Security researchers at Shreshta have identified a phishing campaign targeting Indian citizens. Executive Summary The Income Tax Department (also referred to as IT Department or ITD) is a government agency undertaking direct tax collection of the Government of India. It functions under the Department of Revenue of the Ministry of Finance. The main responsibility of the…

  • Threat actors targeting Union Bank of Philippines users

    Threat actors targeting Union Bank of Philippines users

    —

    by

    Swapneel Patnekar

    Security researchers at Shreshta have identified a phishing campaign targeting Indian citizens. Threat actors targeting Union Bank of Philippines users with a phishing campaign   Executive Summary The Union Bank of the Philippines, Inc., more commonly known as UnionBank, is one of the universal banks in the Philippines and the ninth-largest bank in the country by assets.1  …

  • Phishing targeting MetaMask users

    Phishing targeting MetaMask users

    —

    by

    Pranay Patil

    Security researchers at Shreshta , using our threat intelligence platform SDINET, have identified a phishing website targeting MetaMask users. A phishing campaign targeting MetaMask users has been doing the rounds on the internet. About MetaMask MetaMask is a software cryptocurrency wallet used to interact with the Ethereum blockchain. It allows users to access their Ethereum wallet…

  • Phishing campaign targeting Indiana Department of Workforce Development’s (DWD) Uplink

    Phishing campaign targeting Indiana Department of Workforce Development’s (DWD) Uplink

    —

    by

    Pranay Patil

    On the 21st of January, security researchers at Shreshta, had uncovered a phishing website impersonating the Indiana Department of Workforce Uplink website. During further investigations, we discovered a more extensive phishing campaign. Get free access to Newly registered domain names (NRD) community feeds Newly registered domain names or recently registered domains can be a potential…