Hunting for "Unpaid Toll" Phishing Campaigns with Validin

Introduction In this post, we’ll use Validin’s comprehensive DNS and endpoint responses to uncover a threat actor that uses Calendly phishing domains to steal user credentials.

Introduction In this post, I’ll walk you through the discovery process of using Validin’s extensive domain and IP crawling data to find dozens of related crypto-themed phishing websites.

Introduction In this post, I’ll walk through another real-world example of smishing, this time from a LinkedIn post (also found on this blog) detailing a phone theft experience that nearly resulted in an additional account takeover via a likely targeted phishing campaign.

Introduction In this post, I’ll walk you through using Validin’s DNS history and enrichment capabilities to investigate a common smishing scam: text messages declaring that your package cannot be delivered due to incomplete address information.

At Validin, we seek to make it as easy as possible to search for accurate, timely, and complete passive DNS about public networks for threat hunting and attack surface management.