ReputationThief @ReputationThief
Tweets about domains that are being weaponized to defeat @gmail spam filters. The attacks are usually as a result of DNS misconfigurations or DKIM replay. Everywhere Joined June 2023-
Tweets93
-
Followers6
-
Following104
-
Likes11
The DKIM replay threat actors are having a field day with @yandexmail due to the extremely limited set of headers they sign. They apparently only sign Date|In-Reply-To:From 🙄
It looks like threat actors figured out a way to get DKIM keys into @cloudflare DNS zones (cloudflare.net). nslookup.io/domains/sfi._d… @eastdakota @xxdesmus #subdomailers
Domain hijacking alert @baltimoresun. The domain baseball.baltimoresun.com was a dangling CNAME but an attacker has registered the destination host. The attacker created an SPF record and is sending spam to @gmail leaching the reputation inherited from baltimoresun.com
Domain hijacking alert @broadjam. The domain m.broadjam.com was a dangling CNAME but an attacker has registered the destination host. The attacker created an SPF record and is sending spam leaching the reputation inherited from broadjam.com
@UNC @UNCTarHeelTech Another observed hijacked domain: pages.ucsf.edu @UCSF
Another hijacked domain: makerspace.unc.edu @UNC @UNCTarHeelTech
It appears that the reputation thieves are focusing their attacks on educational institutions - mostly in the .edu TLD. I'm guessing these orgs have vast DNS zones that are hard to maintain, and also tend to have good high volume email reputations.
Another dangling subdomain of berkeley.edu was hijacked, this time its planningtopics.berkeley.edu. @UCBerkeley @BerkeleyIso. Now the attacker is phishing for Instagram accounts.
Stolen domain! The domain cai.berkeley.edu was a dangling CNAME record whose destination host has been registered by a spammer. The domain is being used to auth phish @UCBerkeley @BerkeleyIso
Domain hijacking alert @DukeU @DukeITSO. The domain www[.]artsandhealth.duke.edu was a dangling CNAME but an attacker has registered the destination host. The attacker created an SPF record and is sending spam leaching the reputation inherited from duke.edu
Domain hijacking alert @SCE. The domain www[.]pluggedinbusinesscustomers.sce.com was a dangling CNAME but an attacker has registered the destination host. The attacker created an SPF record and is sending spam to @gmail leaching the reputation inherited from sce.com
@newscomauHQ @gmail This is once again a case of @AdobeMarketo dropping the domain registration of DNS records used for a former customer
Domain hijacking alert @newscomauHQ . The domain sandbox.ads.news.com.au was a dangling CNAME but an attacker has registered the destination host. The attacker created an SPF record and is sending spam to @gmail leaching the reputation inherited from news.com.au
Domain hijacking alert @TheEconomist. The domain l.economist.com was a dangling CNAME but an attacker has registered the destination host. The attacker created an SPF record and is sending spam to @gmail leaching the reputation inherited from economist.com
Domain hijacking alert @SFU. The domain sarg.educ.sfu.ca was a dangling CNAME but an attacker has registered the destination host. The attacker created an SPF record and is sending spam to @gmail users and leaching the reputation inherited from sfu.ca
Domain hijacking alert @UofNH. The domain diwul.org.unh.edu was a dangling CNAME but an attacker has registered the destination host. The attacker is sending spam to @gmail users by leaching the reputation from unh.edu
Stolen domain alert! The domain cdn.questromfeld.bu.edu was a dangling CNAME recored whose destination host has now been registered by an attacker @BU_Tweets @buithelp @BU_CDS
Stolen domain alert! The domain vice4.menards.com was a dangling CNAME record whose destination host has now been registered by spammers @Menards
Nicholas Schafer @nickdschafer
265 Followers 429 Following Ex college baseball player turned #emailgeek. I tweet about random things including baseball cards, email, and birds.
DNS基礎 @beyondDNS
1K Followers 108 Following DNSは＜ドメイン名空間＞を構築･分散管理･検索する仕組です。誰もが利用しているものです。 骨組みの RFC 1034, 1035；それすら守らない実装・運用、生みだされる脆弱性 にはご用心。 ドメイン登録には責任が伴います。 警告: 共用ゾーンサービスには乗取の危険性があります。
Billy McDiarmid @billy_redsift
94 Followers 453 Following MSc Cyber Security student & head of SE @redsift | cats & tunes
Ivan K @Ivan18999274
2 Followers 52 Following
Claudia Belardo @kaosfusion
328 Followers 904 Following Twin mamma, linguist 🇮🇹 🇫🇷 🇨🇷, 🌍wanderer✈️, ♻️eco-ambassador💚, Tiggywinkles🦔releaser, tech💻geek, bold, bright, passionate, Ninja CX CS VP ♀
DNS Institute @DNSInstitute
85 Followers 39 Following The DNS Institute is a training, monitoring, testing, consulting, and documentation service covering the Domain Name System and its security. https://t.co/WeVc36MUTT
SpamAuditor @SpamAuditor
693 Followers 265 Following Your source for news and ideas on how to deal with spam trends. A spamauditor's perspective of life in the trenches battling the world of spam.
HPE Networking @HPE_Networking
102K Followers 3K Following Hewlett Packard Enterprise brings together the power of Al, cloud, and networking to help organizations achieve more.
FalconFeeds.io @FalconFeedsio
69K Followers 881 Following Threat intelligence platform - Data from Deep Web, Dark Web, Open Web || For data API integration : [email protected] Democratizing Cyber Security.
Red Sift @redsift
1K Followers 4K Following Red Sift helps the best security teams understand and remediate #CyberSecurity risk before an incident happens.
John Scott-Railton @jsrailton
165K Followers 3K Following Chasing digital badness. Sr. Researcher @citizenlab @UofT @munkschool. Fmr.Ed. @SecPlanner. Tweets mine. Other platforms @jsrailton too.
Signal @signalapp
622K Followers 23 Following Signal is a nonprofit end-to-end encrypted communications app. Privacy isn’t an optional mode, it’s the way Signal works. Every message, every call, every time.
vx-underground @vxunderground
443K Followers 366 Following The largest collection of malware source code, samples, and papers on the internet. Password: infected
Evan Greer is on Mast... @evan_greer
32K Followers 8K Following 💻 Director @fightfortheftr 🎸#SpotifyIsSurveillance out @GetBetterRecs x @DonGiovanniRecs 💅 she/they, opinions mine. 🐘 https://t.co/R6N5dN1Co7
Whitney Merrill @wbm312
30K Followers 2K Following DPO. Privacy/infosec lawyer. Hacker. Fighting for privacy, digital civil liberties & the users. |views=own| Also at @wbm312.bsky.social
SwiftOnSecurity @SwiftOnSecurity
412K Followers 9K Following computer security person. former helpdesk.
Matthew Green @matthew_d_green
156K Followers 1K Following I teach cryptography at Johns Hopkins. Mostly on BlueSky these days at https://t.co/GI4QlxYTdk.
Taylor Lorenz @TaylorLorenz
359K Followers 13K Following Technology journalist and content creator covering digital rights. Subscribe to my newsletter @usermagazine. FREE SPEECH ENTHUSIAST 📢
Coalition Against Sta... @StopStalkerware
2K Followers 32 Following The Coalition Against Stalkerware facilitates communication between those organizations working to combat domestic violence and the security community.
Eva @evacide
167K Followers 1K Following Director of Cybersecurity @EFF / Co-founder of @stopstalkerware/ My tweets are my own, not my employers’ / I did a TED talk once /
DNS Institute @DNSInstitute
85 Followers 39 Following The DNS Institute is a training, monitoring, testing, consulting, and documentation service covering the Domain Name System and its security. https://t.co/WeVc36MUTT
Steve Linford @stevelinford
192 Followers 174 Following Founder, Chairman of the Spamhaus Group | @Spamhaus Views are my own.
M3AAWG @M3AAWG
990 Followers 111 Following The Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG) brings the industry together to work against bots, malware, spam, DDoS and online exploits.
MalwareHunterTeam @malwrhunterteam
255K Followers 39 Following Official MHT Twitter account. Check out ID Ransomware (created by @demonslay335). More photos & gifs, less malware.
BankInfoSecurity @BnkInfoSecurity
9K Followers 923 Following BankInfoSecurity brings you the most up-to-date #infosec, #compliance, and #fraud news affecting Financial Institutions. Part of the @ISMG_News network.
Virus Bulletin @virusbtn
61K Followers 1K Following Security information portal, testing and certification body. Organisers of the annual Virus Bulletin conference. @[email protected]
CISA Cyber @CISACyber
300K Followers 72 Following Part of @CISAgov, we respond to major incidents, analyze threats, and exchange critical cybersecurity information with partners around the world.
Threat Intelligence @threatintel
115K Followers 365 Following Symantec and Carbon Black's threat hunters bring you the latest threat intelligence from the IT security world.
The Shadowserver Foun... @Shadowserver
22K Followers 0 Following Our mission is to make the Internet more secure by bringing to light vulnerabilities, malicious activity and emerging threats. Join our Alliance!
SANS Institute @SANSInstitute
193K Followers 413 Following SANS is the most trusted and by far the largest source for information & cyber security training, certification and research in the world.
Fortra @fortraofficial
3K Followers 1K Following Fortra delivers AI-amplified data security software solutions that help organizations use and protect their data with confidence.
The Hacker News @TheHackersNews
1.9M Followers 2K Following The #1 trusted source for cybersecurity news, insights, and analysis — built for defenders and trusted by decision-makers.
Vincent Hanna @vincent_hanna
108 Followers 39 Following SBL/XBL/PBL/DBL worker bee @ The Spamhaus Project
SPAMfighter @SPAMfighter
4K Followers 866 Following We serve over 50 million home users and 36.000 servers worldwide from #spam and #malware and offer great PC / Mac & Mobile optimization tools
Catherine Jefferson (... @ErgoOne
622 Followers 815 Following Cancelled completion of move to https://t.co/JwwsLGTKQK because some people I want to interact with decided it wasn't for them. Still there, but also here. No PMs.
SpamBully @spambully
2K Followers 3K Following Easy to use email spam filter for Outlook, Outlook Express and Live Mail. As seen in WIRED Mag, Wall Street Journal, USA Today....
Cloudmark @Cloudmark
1K Followers 231 Following Cloudmark is a leader in intelligent threat protection, safeguarding 12 percent of email inboxes and 20 percent of mobile accounts around the globe.
Anne P. Mitchell Esq @annepmitchell
4K Followers 79 Following Attorney ⚖️ Law Professor 🎓 Federal Law Author 🖋 "You are a goddess rockstar of the highest order." - Wil Wheaton https://t.co/50QJvxjLKS
Kaspersky @kaspersky
312K Followers 86 Following Kaspersky is the world’s largest privately held vendor of Internet security solutions for businesses and consumers. For support https://t.co/enRPRUIwcm
TrendAI @trendaisecurity
112K Followers 4K Following A global AI security leader making the world safer for digital information exchange. AI Fearlessly.
Malwarebytes @Malwarebytes
90K Followers 1K Following All-in-one cybersecurity that's always by your side. Need support? @SupportMWB
Kimberly @StopMalvertisin
17K Followers 629 Following Security Researcher | Cyber Threat / Malware Analyst | Ex Sr. Threat Analyst @ Proofpoint | Founder of Stop Malvertising
Project Honey Pot @projecthoneypot
2K Followers 30 Following Project Honey Pot is the first and only distributed system for identifying spammers and the spambots they use to scrape addresses from your website.
Antispam e.V. @Antispam_eV
158 Followers 14 Following Offizieller Account des Verbraucherschutzvereins Antispam e.V. Wir bekämpfen unerwünschte Werbung wie z. B. E-Mail-Spam, SMS-Werbung oder Cold Calls.
SpamExpert @SpamExpert
1K Followers 1K Following Advice on how to handle spam, how to eliminate spam, how to reduce spam, and how to block spammers
James Hoddinott @jameshoddinott
251 Followers 90 Following Senior Manager, Security Operations, Cloudmark Products, Proofpoint
Enemieslist @ELantispam
48 Followers 22 Following Protecting over 1 billion users from online abuse, EL is an effective anti-spam & email reputation strategy that’s flexible & easy to put into production.
VMware @VMware
312K Followers 740 Following VMware by Broadcom delivers software that modernizes, optimizes and protects the world’s most complex organizations.
You might like
