Exploring Newly Released Top-Level Domains
Essential information
- Published
- 02/09/2024 15:40
- Modified
- 02/09/2024 16:09
- Tags
- 2024-09-02 cybersecurity dns domain abuse domain registration graph-based detection phishing redirection campaigns top-level domains torrenting
- Related entities
- 22 observables, 10 techniques (mitre)
Description
An investigation into 19 new top-level domains (TLDs) released in the past year revealed various malicious activities, including phishing campaigns, distribution of potentially unwanted programs, torrenting websites, and pranking campaigns. The study found a correlation between the TLDs' general availability dates and their popularity, indicating that different groups closely follow the launch of new TLDs to initiate domain registration and usage, including for abuse. The research utilized a graph-based detection system to analyze domain relationships and identify coordinated attack campaigns. Case studies highlighted redirection campaigns, chat bot services, and torrenting clusters. The investigation emphasizes the importance of monitoring domains registered under new TLDs to discover and track new trends and attack campaigns.