{
  "name": "Using SSL Certificates and Graph Theory to Uncover Threat Actors",
  "slug": "using-ssl-certificates-and-graph-theory-to-uncover-threat-actors",
  "description": "Researchers at Infoblox have developed an advanced technique leveraging graph theory and SSL certificates to uncover threat actor operational relationships. The approach analyzes Certificate Transparency logs, using the Subject Alternative Name field in certificates to identify domains under common control. By modeling domains as nodes and certificate relationships as edges, the system reveals comprehensive threat infrastructures. This method enables discovery of new malicious domains, consolidation of threat actor identities, and early detection of emerging threats. The system processes millions of certificates daily, providing actionable intelligence on threat actor operations across various types of cybercriminal activities.",
  "published": "2026-03-04T18:42:41+00:00",
  "created_at": "2026-03-04T18:42:41+00:00",
  "modified_at": "2026-03-05T08:50:01+00:00",
  "created_at_opencti": "2026-03-04T18:42:41+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2026-03-04",
    "certificate transparency",
    "domain clustering",
    "graph theory",
    "infrastructure discovery",
    "ssl certificates",
    "threat intelligence"
  ],
  "related_entities": {
    "attack_patterns": [
      {
        "id": "9fc93596-4114-4121-b74a-84f5a5ef7483",
        "name": "T1608.003"
      },
      {
        "id": "30f6a233-a437-4146-987a-3e42ae12889a",
        "name": "T1608.004"
      },
      {
        "id": "a7cb57ea-5e24-437e-8dad-1d22c2d8a80b",
        "name": "T1590.001"
      },
      {
        "id": "4716a930-cb46-4d50-803a-9e1aaa6be5e9",
        "name": "T1588.004"
      },
      {
        "id": "ef72da1d-2eaa-4d94-8913-06978609cfb4",
        "name": "T1608.001"
      },
      {
        "id": "d19f56ca-5ce8-4bd1-af90-7d83e394470c",
        "name": "T1583.001"
      },
      {
        "id": "e948db36-930d-4013-99ed-fdf14b65907e",
        "name": "T1589.002"
      },
      {
        "id": "88fd8eb3-cc2d-4ff0-92ff-d047dafc7855",
        "name": "T1592.002"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "lphoneflnd.com"
      },
      {
        "id": "",
        "name": "icloudservi.us"
      },
      {
        "id": "",
        "name": "618739.xyz"
      },
      {
        "id": "",
        "name": "jpdomall-jp.com"
      },
      {
        "id": "",
        "name": "apple-mi.support"
      },
      {
        "id": "",
        "name": "kr-vipkrshopping.com"
      },
      {
        "id": "",
        "name": "dfesxe.com"
      },
      {
        "id": "",
        "name": "myid-maps.com"
      },
      {
        "id": "",
        "name": "icloudfind.org"
      },
      {
        "id": "",
        "name": "kr-vipgimall.com"
      },
      {
        "id": "",
        "name": "discount-kr.com"
      },
      {
        "id": "",
        "name": "shoping-jp.com"
      },
      {
        "id": "",
        "name": "icioud-he.site"
      },
      {
        "id": "",
        "name": "vipshopline-jp.com"
      },
      {
        "id": "",
        "name": "icloud-isuport.com"
      },
      {
        "id": "",
        "name": "lcloud-lost.com"
      },
      {
        "id": "",
        "name": "kr-vipsuperstore.com"
      },
      {
        "id": "",
        "name": "apple-findmiy.com"
      },
      {
        "id": "",
        "name": "vip-linemall-kr.com"
      },
      {
        "id": "",
        "name": "618726.xyz"
      },
      {
        "id": "",
        "name": "ethereum-gpt.com"
      },
      {
        "id": "",
        "name": "appleld-find.com"
      },
      {
        "id": "",
        "name": "kr-vipsaleshop.com"
      },
      {
        "id": "",
        "name": "find-my-supportd.com"
      },
      {
        "id": "",
        "name": "365day-jp.com"
      },
      {
        "id": "",
        "name": "telegracvm.cc"
      },
      {
        "id": "",
        "name": "fanskw.com"
      },
      {
        "id": "",
        "name": "lcloud-find-my.org"
      },
      {
        "id": "",
        "name": "buymxj.com"
      },
      {
        "id": "",
        "name": "luckybuy-jp.com"
      },
      {
        "id": "",
        "name": "mchmall.com"
      },
      {
        "id": "",
        "name": "apple-findmys.com"
      },
      {
        "id": "",
        "name": "kr-vipinhotsale.com"
      },
      {
        "id": "",
        "name": "kr-luckybuy.com"
      },
      {
        "id": "",
        "name": "lost-iphone.us"
      },
      {
        "id": "",
        "name": "kr-viphappybuy.com"
      },
      {
        "id": "",
        "name": "soport-apple.com"
      },
      {
        "id": "",
        "name": "bynsd.com"
      },
      {
        "id": "",
        "name": "top-kr.com"
      },
      {
        "id": "",
        "name": "apple-lost-lphone.com"
      },
      {
        "id": "",
        "name": "kr-viptodaysale.com"
      },
      {
        "id": "",
        "name": "icloud-id-lost.com"
      },
      {
        "id": "",
        "name": "hotsale-pl.com"
      },
      {
        "id": "",
        "name": "linebuy-kr.com"
      },
      {
        "id": "",
        "name": "hrtyrge.com"
      },
      {
        "id": "",
        "name": "evnrsn.com"
      },
      {
        "id": "",
        "name": "kr-vipshopmall.com"
      },
      {
        "id": "",
        "name": "hotmall-ro.com"
      },
      {
        "id": "",
        "name": "happybuy-kr.com"
      },
      {
        "id": "",
        "name": "lulbuy.com"
      },
      {
        "id": "",
        "name": "alerta-soporte.us"
      },
      {
        "id": "",
        "name": "618734.xyz"
      },
      {
        "id": "",
        "name": "vipngf-tw.com"
      },
      {
        "id": "",
        "name": "kr-viphotstore.com"
      },
      {
        "id": "",
        "name": "com-locate.space"
      },
      {
        "id": "",
        "name": "icioud-ut.us"
      },
      {
        "id": "",
        "name": "618749.xyz"
      },
      {
        "id": "",
        "name": "bigsale-ro.com"
      },
      {
        "id": "",
        "name": "kr-linemall.com"
      },
      {
        "id": "",
        "name": "lcloud-fmi.com"
      },
      {
        "id": "",
        "name": "kr-vipluckybuy.com"
      },
      {
        "id": "",
        "name": "kr-vipsuperhot.com"
      },
      {
        "id": "",
        "name": "618750.xyz"
      },
      {
        "id": "",
        "name": "vipmall-th.com"
      },
      {
        "id": "",
        "name": "gr-todaysale.com"
      },
      {
        "id": "",
        "name": "linebuy-jp.com"
      },
      {
        "id": "",
        "name": "618713.xyz"
      },
      {
        "id": "",
        "name": "618723.xyz"
      },
      {
        "id": "",
        "name": "onlinevipmall-kr.com"
      },
      {
        "id": "",
        "name": "7iqead.com"
      },
      {
        "id": "",
        "name": "qougle.com"
      },
      {
        "id": "",
        "name": "hotmall-hu.com"
      },
      {
        "id": "",
        "name": "phone-located.support"
      },
      {
        "id": "",
        "name": "mallnxj.com"
      },
      {
        "id": "",
        "name": "findmy-support-id.com"
      },
      {
        "id": "",
        "name": "365shopping-pl.com"
      },
      {
        "id": "",
        "name": "buyjsn.com"
      },
      {
        "id": "",
        "name": "applefind.net"
      },
      {
        "id": "",
        "name": "jponline-jp.com"
      },
      {
        "id": "",
        "name": "firnvse.com"
      },
      {
        "id": "",
        "name": "lcloud-mi.online"
      },
      {
        "id": "",
        "name": "soportt-apple-lost.com"
      },
      {
        "id": "",
        "name": "buyadp.com"
      },
      {
        "id": "",
        "name": "kr-vipsalesale.com"
      },
      {
        "id": "",
        "name": "uyeqa2.com"
      },
      {
        "id": "",
        "name": "618740.xyz"
      },
      {
        "id": "",
        "name": "kr-viponlineshop.com"
      },
      {
        "id": "",
        "name": "soported-appleid.com"
      },
      {
        "id": "",
        "name": "hu-hot.com"
      },
      {
        "id": "",
        "name": "kr-vipgoodbuy.com"
      },
      {
        "id": "",
        "name": "hyviips.com"
      },
      {
        "id": "",
        "name": "kr-vipthmallshop.com"
      },
      {
        "id": "",
        "name": "kr-vipbigmall.com"
      },
      {
        "id": "",
        "name": "lcloud-soporte.online"
      },
      {
        "id": "",
        "name": "com-sms.us"
      },
      {
        "id": "",
        "name": "hotmall-pl.com"
      },
      {
        "id": "",
        "name": "618733.xyz"
      },
      {
        "id": "",
        "name": "618743.xyz"
      },
      {
        "id": "",
        "name": "apple-lost-lnfo.com"
      },
      {
        "id": "",
        "name": "618738.xyz"
      },
      {
        "id": "",
        "name": "viphappybuy-kr.com"
      },
      {
        "id": "",
        "name": "jpshopmall-jp.com"
      },
      {
        "id": "",
        "name": "luckybuy-kr.com"
      },
      {
        "id": "",
        "name": "ahwae2.com"
      },
      {
        "id": "",
        "name": "findid-clouds.com"
      },
      {
        "id": "",
        "name": "supermarket-tw.com"
      },
      {
        "id": "",
        "name": "pl-hotsale.com"
      },
      {
        "id": "",
        "name": "hu-hotsale.com"
      },
      {
        "id": "",
        "name": "618714.xyz"
      },
      {
        "id": "",
        "name": "hotsale-ro.com"
      },
      {
        "id": "",
        "name": "find-myclouds.com"
      },
      {
        "id": "",
        "name": "buy-ro.com"
      },
      {
        "id": "",
        "name": "618712.xyz"
      },
      {
        "id": "",
        "name": "kr-vipbuyone.com"
      },
      {
        "id": "",
        "name": "goodshop-jp.com"
      },
      {
        "id": "",
        "name": "hu-todaysale.com"
      },
      {
        "id": "",
        "name": "icloudsolutions.us"
      },
      {
        "id": "",
        "name": "kr-vipbuybuybuy.com"
      },
      {
        "id": "",
        "name": "618731.xyz"
      },
      {
        "id": "",
        "name": "kr-viponlinestore.com"
      },
      {
        "id": "",
        "name": "mall-pl.com"
      },
      {
        "id": "",
        "name": "dcikj.com"
      },
      {
        "id": "",
        "name": "apple-lcloud.com.tr"
      },
      {
        "id": "",
        "name": "isuporte-cloud.com"
      },
      {
        "id": "",
        "name": "618741.xyz"
      },
      {
        "id": "",
        "name": "viphappybuy-jp.com"
      },
      {
        "id": "",
        "name": "kr-vipshoping.com"
      },
      {
        "id": "",
        "name": "kr-vipbuyvip.com"
      },
      {
        "id": "",
        "name": "vip-hotmall-kr.com"
      },
      {
        "id": "",
        "name": "618722.xyz"
      },
      {
        "id": "",
        "name": "kaid-th.com"
      },
      {
        "id": "",
        "name": "618748.xyz"
      },
      {
        "id": "",
        "name": "telegramflp.cc"
      },
      {
        "id": "",
        "name": "kr-vipbuymall.com"
      },
      {
        "id": "",
        "name": "maps-iphone.cloud"
      },
      {
        "id": "",
        "name": "todaysale-jp.com"
      },
      {
        "id": "",
        "name": "find-my-phone-usa.com"
      },
      {
        "id": "",
        "name": "kr-vipbuytop.com"
      },
      {
        "id": "",
        "name": "lcloud-lost.online"
      },
      {
        "id": "",
        "name": "pl-hot.com"
      },
      {
        "id": "",
        "name": "365shop-pl.com"
      },
      {
        "id": "",
        "name": "hu-shopvip.com"
      },
      {
        "id": "",
        "name": "find-appleld.my"
      },
      {
        "id": "",
        "name": "meyou-jp.com"
      },
      {
        "id": "",
        "name": "bestselling-pl.com"
      },
      {
        "id": "",
        "name": "applecare-find.xyz"
      },
      {
        "id": "",
        "name": "kr-vipshopshop.com"
      },
      {
        "id": "",
        "name": "buyosd.com"
      },
      {
        "id": "",
        "name": "myphone-lost.com"
      },
      {
        "id": "",
        "name": "kr-vipsupershop.com"
      },
      {
        "id": "",
        "name": "fwerwetp.com"
      },
      {
        "id": "",
        "name": "kr-vipdiscount.com"
      },
      {
        "id": "",
        "name": "icloud-lost-mode.org"
      },
      {
        "id": "",
        "name": "account-apple-login.com"
      },
      {
        "id": "",
        "name": "lubuys.com"
      },
      {
        "id": "",
        "name": "aieutw3.com"
      },
      {
        "id": "",
        "name": "remix-ethereum-ide-bot.com"
      },
      {
        "id": "",
        "name": "find-my-phone-support.com"
      },
      {
        "id": "",
        "name": "supportid-findmy.com"
      },
      {
        "id": "",
        "name": "kr-vipsalestore.com"
      },
      {
        "id": "",
        "name": "linemall-kr.com"
      },
      {
        "id": "",
        "name": "auyshop.com"
      },
      {
        "id": "",
        "name": "aaa-pl.com"
      },
      {
        "id": "",
        "name": "618724.xyz"
      },
      {
        "id": "",
        "name": "hu-vipshop.com"
      },
      {
        "id": "",
        "name": "hu-vipmall.com"
      },
      {
        "id": "",
        "name": "apple-ubicado.com.tr"
      },
      {
        "id": "",
        "name": "telegrxcnm.cc"
      },
      {
        "id": "",
        "name": "japanmall-jp.com"
      },
      {
        "id": "",
        "name": "mgdert.com"
      },
      {
        "id": "",
        "name": "vipgoodbuy-kr.com"
      },
      {
        "id": "",
        "name": "icioud-lh.com.tr"
      },
      {
        "id": "",
        "name": "hotshopping-ro.com"
      },
      {
        "id": "",
        "name": "device-find-apple.com"
      },
      {
        "id": "",
        "name": "coinbase-invoice.com"
      },
      {
        "id": "",
        "name": "vipstore-jp.com"
      },
      {
        "id": "",
        "name": "kr-vipmystore.com"
      },
      {
        "id": "",
        "name": "uaeioa2.com"
      },
      {
        "id": "",
        "name": "telegramoimn.cc"
      },
      {
        "id": "",
        "name": "maps-iphone.online"
      },
      {
        "id": "",
        "name": "icloudservice.me"
      },
      {
        "id": "",
        "name": "vip-linebuy-kr.com"
      },
      {
        "id": "",
        "name": "kr-vipsupermarket.com"
      },
      {
        "id": "",
        "name": "618747.xyz"
      },
      {
        "id": "",
        "name": "located-find.xyz"
      },
      {
        "id": "",
        "name": "hu-vipstore.com"
      },
      {
        "id": "",
        "name": "aiagaw4.com"
      },
      {
        "id": "",
        "name": "kr-vipbuyshop.com"
      },
      {
        "id": "",
        "name": "kr-discountline.com"
      },
      {
        "id": "",
        "name": "icloudservice.tr"
      },
      {
        "id": "",
        "name": "iflnd-phone-us.com"
      },
      {
        "id": "",
        "name": "618721.xyz"
      },
      {
        "id": "",
        "name": "buyjdn.com"
      },
      {
        "id": "",
        "name": "mymall-jp.com"
      },
      {
        "id": "",
        "name": "fanjda.com"
      },
      {
        "id": "",
        "name": "soporte-apple.com"
      },
      {
        "id": "",
        "name": "ro-todaysale-ro.com"
      },
      {
        "id": "",
        "name": "fwerwe.com"
      },
      {
        "id": "",
        "name": "icloudsolution.us"
      },
      {
        "id": "",
        "name": "bigsale-hu.com"
      }
    ]
  },
  "external_refs": [
    "https://otx.alienvault.com/pulse/69a88b31dad43f4df1caab65",
    "https://www.infoblox.com/blog/security/connecting-dots-with-ssl-certificates-finding-threat-actors-with-graph-theory/"
  ]
}