#prolificpuma — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #prolificpuma, aggregated by home.social.
-
Prolific Puma continues to abuse the usTLD, along with the meTLD (Montenegro). In the last couple days, they've registered: zn4[.]us,omot[.]me,xcrs[.]info,7fy[.]us,vksl[.]info,oesz[.]me,eayf[.]me,mxds[.]me.
#dns #infoblox #cybercrime #malware #cybersecurity #infosec #tds #prolificpuma #phishing -
Prolific Puma is still busy and abusing the usTLD. In the last few days, they've registered wm0[.]us,w6u[.]us,9gm[.]us,va6[.]us,eiyi[.]me,skjh[.]me,om0[.]us,rtfd[.]me,ifih[.]me,xb7[.]us,6hv[.]us,ghty[.]me,h9q[.]us,piwp[.]me,mk9[.]us,q5b[.]us,lb3[.]us,4zg[.]us,sbrr[.]me. #dns #infoblox #cybercrime #malware #cybersecurity #infosec #tds #prolificpuma #phishing
-
Some of our folks are giving a technical webinar December 13th on SMS Cybercrime -- a DNS perspective. They will cover the malicious link shortener Prolific Puma and how we discovered it, what we see from an MFA phishing perspective, and look at what DNS actors doing all that USPS phishing look like. #dns #cybersecurity #infosec #phishing #prolificpuma #sms #malware #cybercrime #infoblox https://www.infoblox.com/registration-sms-cybercrime-a-dns-perspective/
-
So.. twice this year a DNS threat actor changed behavior when we were investigating and they soared from suspicious to malicious. lol. clever. first #decoydog then #prolificpuma ... anyhow.. kinda funny.. we fully expected them to regroup... it's their job after all to do the crime thing.. but they just can't let go of music references.. new email address 6lackrules@proton[.]me. no more anon usTLD registrations it looks like.
Here's some domains. a slight change in hosting. i don't see the shorteners set up yet but for these'll be for sms bad activities again i'm sure.
zk0[.]us,zg5[.]us,yl4[.]us,yg2[.]us,y4f[.]us,xa4[.]us,x8i[.]us,wu7[.]us,wn3[.]us,w1m[.]us,v9e[.]us,v3y[.]us,uv5[.]us,uj2[.]us,ud4[.]us,u7n[.]us,u2f[.]us,tr0[.]us,tl1[.]us,t7x[.]us,s9k[.]us,qb9[.]us,q8r[.]us,q6d[.]us,q3u[.]us,q2u[.]us,pj8[.]us,p6s[.]us,p6h[.]us,o8r[.]us,o8l[.]us,o1i[.]us,lh8[.]us,ks0[.]us,kf8[.]us,k7x[.]us,k3o[.]us,jx4[.]us,jf4[.]us,hz0[.]us,h7s[.]us,h6l[.]us,g9s[.]us,g9j[.]us,fy3[.]us,f5y[.]us,f3z[.]us,er7[.]us,ecyz[.]us,e9c[.]us,d8c[.]us,c9i[.]us,c9a[.]us,bk7[.]us,a8m[.]us,a8j[.]us,a6r[.]us,9yl[.]us,9xl[.]us,9ou[.]us,9ma[.]us,9jy[.]us,9iq[.]us,8qe[.]us,8mv[.]us,8im[.]us,8fv[.]us,7ov[.]us,7nv[.]us,7cb[.]us,6np[.]us,6bu[.]us,5jc[.]us,5ja[.]us,3kc[.]us,2jk[.]us,2cl[.]us,0ho[.]us,piyt[.]us,zlyx[.]us,wyop[.]us,wk0[.]us,k0z[.]us,8ec[.]us,7ol[.]us,kaqu[.]us,jdhr[.]us,ivdo[.]us,w6r[.]us,t6s[.]us,sg4[.]us,j8q[.]us,f1d[.]us,aehv[.]us,utpy[.]us,jqcu[.]us,kxjm[.]us
#dns #malware #smishing #phishing #cybersecurity #infosec #infoblox
-
.US Harbors Prolific Malicious Link Shortening Service
From @briankrebs
"Prolific Pumba" registering malicious shortened .us domains daily as a link shortening service for malicious websites, helping them evade security/detection mechanisms and masking the true nature of the malicious domain.
#cybersecurity #infosec #prolificpuma
https://krebsonsecurity.com/2023/10/us-harbors-prolific-malicious-link-shortening-service/
-
Prolific Puma’s operations highlight the potential abuse of the DNS for criminal activities while remaining undetected for an extended period, underscoring the ongoing challenges in combating cybercrime.
-
.US Harbors Prolific Malicious Link Shortening Service https://krebsonsecurity.com/2023/10/us-harbors-prolific-malicious-link-shortening-service/ #NationalTelecommunicationsandInformationAdministration #blackpumaoct33@ukr.net #maliciouslinkshortener #ALittleSunshine #JosefBakhovsky #KristapsRonka #ProlificPuma #WebFraud2.0 #BlackPumas #LeilaPuma #Namecheap #Infoblox #NameSilo #GoDaddy
-
.US Harbors Prolific Malicious Link Shortening Service
https://krebsonsecurity.com/2023/10/us-harbors-prolific-malicious-link-shortening-service/
#NationalTelecommunicationsandInformationAdministration #blackpumaoct33@ukr.net #maliciouslinkshortener #ALittleSunshine #JosefBakhovsky #KristapsRonka #ProlificPuma #WebFraud2.0 #BlackPumas #LeilaPuma #Namecheap #Infoblox #NameSilo #GoDaddy