DomainTools (@domaintools) 's Twitter Profile
DomainTools

@domaintools

A global leader for internet #intel that enables security practitioners to proactively defend their organization in a constantly evolving threat landscape.

ID: 52504126

linkhttp://www.DomainTools.com calendar_today30-06-2009 20:08:45

6,6K Tweet

13,13K Followers

1,1K Following

DomainTools (@domaintools) 's Twitter Profile Photo

1 week to go! Don’t miss “Seeing is Believing” at #SleuthCon—an eye-opening talk mapping the Russian ransomware landscape. OSINT + proprietary data = powerful insights. 🎤 Daniel Schwalbe & Analyst1's Jon DiMaggio 📅 June 6 🔗 sleuthcon.com/seeing-is-beli…

1 week to go!

Don’t miss “Seeing is Believing” at #SleuthCon—an eye-opening talk mapping the Russian ransomware landscape.

OSINT + proprietary data = powerful insights.

🎤 Daniel Schwalbe & Analyst1's Jon DiMaggio
📅 June 6
🔗 sleuthcon.com/seeing-is-beli…
DomainTools (@domaintools) 's Twitter Profile Photo

📅 Panel: Decoding Domain Intelligence 🗓️ June 11 | 🕙 10AM PT / 1PM ET 🎓 Earn CPE Credits 106M+ domains popped up in 2024. What patterns can defenders use? Join experts from DomainTools, Infoblox, SURBL & more. domaintools.com/webinar-decodi…

📅 Panel: Decoding Domain Intelligence
🗓️ June 11 | 🕙 10AM PT / 1PM ET
🎓 Earn CPE Credits

106M+ domains popped up in 2024. What patterns can defenders use?

Join experts from DomainTools, <a href="/Infoblox/">Infoblox</a>, SURBL &amp; more.

domaintools.com/webinar-decodi…
BSidesNoVA (@bsides_nova) 's Twitter Profile Photo

I bet they aren't even thinking about #BSidesNoVA like I am. #CFP information coming soon ⌛ Friday, October 10th Saturday, October 11th Arlington, Virginia bsidesnova.org

I bet they aren't even thinking about #BSidesNoVA like I am.

#CFP information coming soon ⌛

Friday, October 10th
Saturday, October 11th
Arlington, Virginia
bsidesnova.org
SecuritySnacks (@securitysnacks) 's Twitter Profile Photo

DomainTools Investigations’ (DTI) latest analysis uncovers a technically sophisticated malware campaign that uses fake CAPTCHAs and spoofed document verification pages to trick users into self-infecting their machines with the NetSupport RAT. dti.domaintools.com/how-threat-act…

DomainTools Investigations’ (DTI) latest analysis uncovers a technically sophisticated malware campaign that uses fake CAPTCHAs and spoofed document verification pages to trick users into self-infecting their machines with the NetSupport RAT.
dti.domaintools.com/how-threat-act…
DomainTools (@domaintools) 's Twitter Profile Photo

DomainTools is an Exhibiting Sponsor at SLEUTHCON! Check out our booth later this week at the show. Come for the shirt, stay to learn how domain intelligence can prevent, mitigate, and investigate attacks. See the full show schedule here: sleuthcon.com/2025agenda

DomainTools is an Exhibiting Sponsor at <a href="/SLEUTHCON/">SLEUTHCON</a>! 

Check out our booth later this week at the show. Come for the shirt, stay to learn how domain intelligence can prevent, mitigate, and investigate attacks. 

See the full show schedule here: sleuthcon.com/2025agenda
The Hacker News (@thehackersnews) 's Twitter Profile Photo

🚨 Watch your clipboard! A fake DocuSign site tricks users into running malware with a sneaky PowerShell script—copied via CAPTCHA. ✔️ Clipboard poisoning ✔️ Fake Gitcode & DocuSign sites ✔️ NetSupport RAT deployed 👀 Learn how it works → thehackernews.com/2025/06/fake-d…

DomainTools (@domaintools) 's Twitter Profile Photo

Join Renee Burton (Infoblox) along with Daniel Schwalbe (DomainTools), Raymond Dijkxhoorn (SURBL), & Peter Lowe (FIRST) in a panel to decode domain intelligence. 📅 June 11 | 🕙 10AM PT / 1PM ET 🎓 CPE credits available! 🔗 Save your spot: domaintools.com/webinar-decodi…

Join Renee Burton (<a href="/Infoblox/">Infoblox</a>) along with Daniel Schwalbe (DomainTools), Raymond Dijkxhoorn (SURBL), &amp; Peter Lowe (FIRST) in a panel to decode domain intelligence.

📅 June 11 | 🕙 10AM PT / 1PM ET
🎓 CPE credits available!

🔗 Save your spot: domaintools.com/webinar-decodi…
DomainTools (@domaintools) 's Twitter Profile Photo

TOMORROW at #SLEUTHCON: Daniel Schwalbe & Analyst1's Jon DiMaggio take the stage to unveil a visual and analytical map of Russian ransomware groups. 🕵️‍♂️ 🔗 Full agenda: sleuthcon.com/2025agenda #CyberThreats #OSINT #RansomwareResearch

DomainTools (@domaintools) 's Twitter Profile Photo

DomainTools is a proud exhibiting sponsor for @SleuthCon! Visit our booth today to learn more about how to detect relevant indicators earlier in their lifecycle to identify and disrupt incipient attacks. We're giving out t-shirts and we're raffling off a Mac mini!

DomainTools is a proud exhibiting sponsor for @SleuthCon! 

Visit our booth today to learn more about how to detect relevant indicators earlier in their lifecycle to identify and disrupt incipient attacks.

We're giving out t-shirts and we're raffling off a Mac mini!
DomainTools (@domaintools) 's Twitter Profile Photo

Coffee Break starts in 15 minutes SLEUTHCON! It's a great opportunity to stop by the DomainTools booth to meet our team! Plus, we have t-shirts and one lucky person will leave with a Mac mini! domaintools.com #SLEUTHCON

Coffee Break starts in 15 minutes <a href="/SLEUTHCON/">SLEUTHCON</a>! It's a great opportunity to stop by the DomainTools booth to meet our team!

Plus, we have t-shirts and one lucky person will leave with a Mac mini! 

domaintools.com

#SLEUTHCON
DomainTools (@domaintools) 's Twitter Profile Photo

Want to hear Raymond Dijkxhoorn's (SURBL) insights on domain and DNS intelligence? Join us this coming Wednesday as our panel analyzes the trends, techniques, & tools that shaped the domain intelligence landscape over the past year. Save your spot here: domaintools.com/webinar-decodi…

Want to hear Raymond Dijkxhoorn's (SURBL) insights on domain and DNS intelligence?

Join us this coming Wednesday as our panel analyzes the trends, techniques, &amp; tools that shaped the domain intelligence landscape over the past year. 

Save your spot here: domaintools.com/webinar-decodi…
DomainTools (@domaintools) 's Twitter Profile Photo

Happening in 1 HOUR at SLEUTHCON! Join Daniel Schwalbe & Jon DiMaggio for a groundbreaking session: "Seeing is Believing: A Visual and Analytical Map of Russian-affiliated Ransomware Groups" 🔍 🎤 Don’t miss this one! 🔗 sleuthcon.com/seeing-is-beli… #CyberIntel #Ransomware

DomainTools (@domaintools) 's Twitter Profile Photo

We hope you caught Daniel Schwalbe & Jon DiMaggio at #SleuthCon! 🔍 Their talk on Russian-affiliated ransomware revealed: 🔹 Code reuse ≠ same group 🔹 Labels are outdated 🔹 Track activity clusters, not names Full writeup + infographic 👉 dti.domaintools.com/mapping-hidden…

We hope you caught <a href="/DanOnSecurity/">Daniel Schwalbe</a> &amp; <a href="/Jon__DiMaggio/">Jon  DiMaggio</a> at #SleuthCon! 🔍 Their talk on Russian-affiliated ransomware revealed:

🔹 Code reuse ≠ same group
🔹 Labels are outdated
🔹 Track activity clusters, not names

Full writeup + infographic 👉 dti.domaintools.com/mapping-hidden…
DomainTools (@domaintools) 's Twitter Profile Photo

The afternoon break SLEUTHCON begins in 15 minutes! Have you entered the raffle yet? DomainTools is sending one lucky person home with a Mac mini! Stop by our booth to learn more. #SLEUTHCON

The afternoon break <a href="/SLEUTHCON/">SLEUTHCON</a> begins in 15 minutes! Have you entered the raffle yet? DomainTools is sending one lucky person home with a Mac mini! Stop by our booth to learn more. 

#SLEUTHCON
DomainTools (@domaintools) 's Twitter Profile Photo

🎧 New #BreakingBadness episode! How are domains powering modern cyber attacks—from AI phishing kits to nation-state ops? Host Kali Fencl + top experts break it down: Joe Słowik 🌻 | Robert Duncan | John Fokker | Vivek Ramachandran 🎙️ Listen now: podcasts.apple.com/us/podcast/bey…

🎧 New #BreakingBadness episode!
How are domains powering modern cyber attacks—from AI phishing kits to nation-state ops?

Host <a href="/KaliFencl/">Kali Fencl</a> + top experts break it down:
<a href="/jfslowik/">Joe Słowik 🌻</a> | Robert Duncan | John Fokker | <a href="/vivekramac/">Vivek Ramachandran</a>

🎙️ Listen now: podcasts.apple.com/us/podcast/bey…
SecuritySnacks (@securitysnacks) 's Twitter Profile Photo

FIN6 (Skeleton Spider) is using AWS & fake resumes to deliver malware via trusted job platforms. ⚠️ Realistic lures 🕵️‍♂️ Cloud-hosted phishing 🥚 More_eggs backdoor Read the full analysis here: dti.domaintools.com/skeleton-spide…

FIN6 (Skeleton Spider) is using AWS &amp; fake resumes to deliver malware via trusted job platforms.

⚠️ Realistic lures
🕵️‍♂️ Cloud-hosted phishing
🥚 More_eggs backdoor

Read the full analysis here: dti.domaintools.com/skeleton-spide…
BleepingComputer (@bleepincomputer) 's Twitter Profile Photo

FIN6 hackers pose as job seekers to backdoor recruiters’ devices - Bill Toulas bleepingcomputer.com/news/security/… bleepingcomputer.com/news/security/…

SecuritySnacks (@securitysnacks) 's Twitter Profile Photo

ICYMI: Skeleton Spider (FIN6) is using trusted cloud services like AWS to deliver malware via fake resumes & job lures. Social engineering meets stealthy infrastructure. Learn more here: dti.domaintools.com/skeleton-spide…

DomainTools (@domaintools) 's Twitter Profile Photo

🎙️ In this #RSAC2025 episode: 🔍 Jon DiMaggio (Analyst1) unpacks ransomware supply chains, rebrands & affiliate betrayal 🎮 Matt Radolec (Varonis) explores how gamers can lead in cyber Listen here: podcasts.apple.com/us/podcast/ins…

🎙️ In this #RSAC2025 episode:

🔍 <a href="/Jon__DiMaggio/">Jon  DiMaggio</a> (<a href="/Analyst1/">Analyst1</a>)  unpacks ransomware supply chains, rebrands &amp; affiliate betrayal
🎮 Matt Radolec (<a href="/varonis/">Varonis</a>) explores how gamers can lead in cyber

Listen here: podcasts.apple.com/us/podcast/ins…
DomainTools (@domaintools) 's Twitter Profile Photo

Each month, B C compiles articles, podcasts, and more that are being passed around within our team and in the community. This week we're enjoying works from: 🖤 Qualys 🖤 @Proofpoint 🖤 Mandiant (part of Google Cloud) 🖤 Intel 471 🖤 @KrebsOnSecurity dti.domaintools.com/cybersecurity-…