Dropcatch Scavengers: Expired Malicious Domains Become Cash Cows

Dropcatch actors inherit traffic from compromised websites by acquiring expired malicious domains and redirecting victims to scams and malware. Infoblox Threat Intel | Dropcatch series | Part 3 of 3 Executive Summary Purchasing expired domains from legitimate companies is a well-known threat actor trick. By acquiring these domains, a practice called dropcatch, they gain the reputation of the original owner. In our companion blog, we introduced a threat actor who has spent…

Diamond Model