When a domain is registered, information about the registrants and other related personnel
is recorded by WHOIS databases owned by registrars or registries (called WHOIS providers …

Miscreants abuse thousands of domain names every day by launching large-scale attacks
such as phishing or malware campaigns. While some domains are solely registered for …

The cybersecurity report provides unstructured actionable cyber threat intelligence (CTI) with
detailed threat attack procedures and indicators of compromise (IOCs), eg, malware hash or …

The digital world represents a new frontier for law enforcement operations. The virtual nature
of online communications creates challenges regarding legal frameworks and sovereignty …

Botnets are machines that are increasingly controlled by cybercriminals to perform various
attacks. Traditional methods of defense, such as blocklisting, become ineffective because …

Current techniques to monitor botnets towards disruption or takedown are likely to result in
inaccurate data gathered about the botnet or be detected by C&C orchestrators. Seeking a …

Phishing on the web is a model of social engineering and an attack vector for getting access
to sensitive and financial data of individuals and corporations. Phishing has been identified …

Domain generation algorithms (DGAs) can be categorized into three types: zero-knowledge,
partial-knowledge, and full-knowledge. While prior research merely focused on zero …

With more than 350 million active domain names and at least 200,000 newly registered
domains per day, it is technically and economically challenging for Internet intermediaries …

Where are the IoT C2 servers located? What vulnerabilities does IoT malware try to exploit?
What DDoS attacks are launched in practice? In this work, we conduct a large scale study to …