State-Sponsored Russian APTs and Tracking Phishing Domains

Welcome back to Validin's monthly newsletter and thank you for inviting us into your inbox. This month we analyzed Laundry Bear infrastructure, created a guide to finding phishing domains with HTML features in Validin, and announced two upgrades to our product. As always, we appreciate any feedback! - The Validin Team

FEATURED RESEARCH

Hunting Laundry Bear: Infrastructure Analysis Guide and Findings

Our newest research dives into Laundry Bear, a Russian state-sponsored APT. Our latest blog expands on public intelligence, showcasing ways we’ve pivoted and discovered new infrastructure and activity. 👉 Read the full analysis

BY THE NUMBERS

June's Top Viewed Threat Actor Profiles

If you're logged into Validin, view the full profiles:

1. ClickFix
2. Lazarus Group
3. Kimsuky
4. Scattered Spider
5. BlueNoroff (APT 38)

FEATURED RESOURCE

Finding Phishing Domains with HTML Features in Validin

In our latest post, we show how HTTP feature data such as redirects, headers, and virtual host summaries, can be used for advanced infrastructure discovery. Learn how to trace phishing domains and suspicious redirects using real-world examples and techniques built into Validin's user interface. 👉 Read the guide

PRODUCT UPDATES

Substantial Upgrades to Crawling History and Artifact Collection

We’ve supercharged Validin’s ability to surface threat intel with 8+ months of historical HTTP/S banner data and expanded artifact collection. These enhancements unlock new pivoting capabilities and help threat hunters spot infrastructure and subtle threat signals faster than ever. 👉 See what’s new

SEE YOU SOON

Validin is heading to LABScon in September

We're excited to announce we are heading to sunny Arizona this September to sponsor and attend LABScon. If you're headed there, we'd love to meet you in person.