Threat Research

The ApateWeb campaign has significantly expanded its infrastructure in 2024, with over 2,400 new domains emerging this year alone. This increase, coupled with the discovery of 5 new IP addresses hosting its entry points, signals a growing threat....

Over the past three months, we have tracked a campaign, designated redir_pup_apk_dist, involving 1,346 domains redirecting users to sites distributing potentially unwanted Android APK files. These landing pages primarily promote adult or gambling applications and use similar design templates....

A Roblox phishing campaign has been targeting users through at least 19 active domains, some of which have been running for months or even years. These domains primarily use country code top-level domains (TLDs) and host phishing pages designed to steal Roblox login credentials....