🕵️‍♀️ Being a Threat Investigator is rarely just a “job”. These dedicated individuals all have a deep-rooted desire to help others and share a common goal: to make the internet a safer, more accountable place.

Here, one of Spamhaus’ threat investigators reflects on their role in

We bring good news: AS54801 has finally abandoned 147.178.0.0/24! However, the bad news is that AS141883 (bgpnet.com) now appears to have picked up another block, 148.178.16.0/22

👉 bgp.he.net/ip/148.178.16.0

And the location? Hong Kong, of course 🙄

Although this

This month StealC 🔝 tops the charts for malware families associated with malware sites at 4,577 samples shared on URLHaus. Meanwhile Cobalt Strike remains #1 for IOCs shared - find out which malware are in the Top10 at the links below:

ThreatFox | IOCs shared:
👉

It’s a good day for consumers of smart devices! From today, manufacturers of consumer smart devices must comply with a new UK law to meet basic cyber security requirements to keep you safe. Learn how this affects you as a consumer in our latest blog⬇️
ncsc.gov.uk/blog-post/smar…

ThreatFabric analysts recently discovered a new mobile malware family in active development. Brokewell poses a significant threat to the banking industry, providing attackers with an extensive set of device takeover capabilities. threatfabric.com/blogs/brokewel…

📢 Spamhaus Threat Intel Community Portal users | Submitting proof

When submitting suspicious activity or threats, if you have any evidence to support your submission, we want to see it. Adding a link to your evidence in the 'Reason' field can help speed up the process of

❗ Researchers at Spamhaus have identified an abuse problem for Internet Backbone and Colocation Provider, Hurricane Electric (Hurricane Electric) relating to AS394711, allocated to New Hampshire-based Limenet LLC.

Spamhaus currently assesses that Limenet is a bulletproof hosting operation;

Abusive ASN!

100 ips in use and bunch of abuse !
Ignoring abuse reports also.

AS 204428( SS-Net )

They have been added on the ASN-Drop list from Spamhaus

and ofcourse the other Malicious ASN's are the upstream...

AS50360 - Tamatiya EOOD
AS47890 - UNMANAGED LTD

Malicious domains with TLD .cn hold the #1 rank dominating our listed data at 92,885 domains 🤯 - this outnumbers the combined total of the remaining Top5 ccTLDs!

Learn more in the Domain Reputation Update👇
spamhaus.org/resource-hub/d…

#ccTLD #DomainReputation #ThreatIntel

❗️Spamhaus #TicketDeskTeam has noticed an 📈 increase in removal requests from frustrated mobile phone users who can't send emails from their devices, due to their ISPs policies.

Can you guess what the ISP's in question are still doing?

Find out here ⬇️
spamhaus.org/resource-hub/c…

❗Here are the latest Spamhaus DROP Listings:

SBL645086, SBL645110, SBL645212, SBL645225 , SBL641175, SBL645263, and SBL645307.

You can learn about these resources and why they have been listed by searching for them in the IP and domain checker:

👉 check.spamhaus.org