Spamhaus Technology

1.7K posts

Spamhaus Technology banner
Spamhaus Technology

Spamhaus Technology

@SpamhausTech

Spamhaus is the trusted authority on IP and domain reputation. This data not only protects but also provides insight across networks and email worldwide.

London, England Katılım Nisan 2016
160 Takip Edilen3.6K Takipçiler
Spamhaus Technology
Spamhaus Technology@SpamhausTech·
🤔 Looking for contextual metadata on malicious and suspicious domains? Spamhaus Malicious Domain Intelligence is now available via Rsync in JSON format - ideal for teams that want to handle queries and enrichment workflows in-house. Use it to enhance investigations, support research, and enrich threat-intelligence operations 🕵️ - learn more here ⤵️ hubs.ly/Q04hs1qY0 Or request a FREE 30-day trial today ⤵️ hubs.ly/Q04hs6rW0 #Domains #Rsync #ThreatIntel
Spamhaus Technology tweet media
English
0
1
0
144
Spamhaus Technology retweetledi
Spamhaus
Spamhaus@spamhaus·
❗ We’ve observed a scammer clearly abusing Microsoft's 'msonlineservicesteam@microsoftonline[. ]com' for spam distribution. The header and message body appear completely legitimate - the abuse is happening through injection into the Subject: ✉️ Here's an example: "Your PayPal order for 0.0092 BTC ($699.99) is complete. Not you? Call +1 (803) 237-5050 account email verification code." At this point, it appears the attacker may have simply set the malicious text as either the account name or the organization name. This also appears to line up with what @zackwhittaker TechCrunch Security Editor identified last week (shared on Mastodon): @zackwhittaker/116562360000833298" target="_blank" rel="nofollow noopener">mastodon.social/@zackwhittaker… ....although the activity we’re seeing appears to stretch back several months. Takeaway: automated notification systems should not allow this level of customization. Microsoft has been informed of this abusive activity. #ThreatIntel #Spam #InfoSec #CyberSecurity
Spamhaus tweet media
English
2
6
14
2.3K
Spamhaus Technology
Spamhaus Technology@SpamhausTech·
🎉 We’re proud to sponsor the 38th #FIRSTCon in Denver next month alongside our partner @abuse_ch! Some of the team will be there, joined by colleagues from The @spamhaus Project. 👀 Keep an eye out for a couple of presentations from the team - we’ll share more details closer to the time...
Spamhaus Technology tweet media
English
0
2
3
295
Spamhaus Technology retweetledi
Spamhaus
Spamhaus@spamhaus·
@NSAGov shares 4 simple steps to secure your router ⤵️ 1⃣ Update your router 2⃣ Change the default username & password 3⃣ Disable remote management 4⃣ Replace outdated routers Read full guidance via the National Cybersecurity Alliance below👇
National Cybersecurity Alliance@StaySafeOnline

Reboot your router! A new memo from the United States government now suggests it’s a prime target for hackers. Here’s what to do right now to stay secure: hubs.la/Q04fcxdw0

English
0
3
3
579
Spamhaus Technology
Spamhaus Technology@SpamhausTech·
🔥 5 days and counting!! If you’re heading to #PIVOTcon26 some of our team will be there again this year alongside our partner @abuse_ch — and we're proud to be sponsoring once again. Looking forward to the talks, conversations, and catching up over a beer 🍻
PIVOTcon@pivot_con

Countdown is real ⌛️ Next week‼️ #ThreatResearch community gathers in Málaga 🇪🇸 Time to remind our PIVOTcon song: soundcloud.com/argonix/pivotc… But watch out — it's a banger! thx: @JReisdorffer #CTI #ThreatIntel #PIVOTcon26

English
0
0
1
57
Spamhaus Technology
Spamhaus Technology@SpamhausTech·
📢  FREE REPORT | Read @spamhaus Project's latest Domain Reputation Update below 🌐⤵️
Spamhaus@spamhaus

🎰 “casino” (+78%) is the #1 trending term for new domain registrations this reporting period. Perhaps unsurprisingly, the term “casino” also saw a +122% ⬆️ increase in phishing domains observed by Spamhaus, ranking #2 in the Top 10. 🎣 Plus, a flurry of new Turkish casino-related entries: jojobet (#15), casibom (#17), and holiganbet (#19). Find out which phishing term ranks #1 in the latest Spamhaus Domain Report (Oct 2025 – March 2026): 👉 spamhaus.org/resource-hub/d… #Infosec #ThreatIntel

English
0
0
0
52
Spamhaus Technology
Spamhaus Technology@SpamhausTech·
📽️ NEXT WEEK | Don't miss Lauren Meyer and Melinda Plemel as they breakdown what senders think is “doing everything right” and how their behavior is ACTUALLY interpreted.... 🤩 📆 Date: May 5th 🕔 Time: 10am EDT | 4pm CET 📍Location: Reserve your place here👇👇 hubs.ly/Q04dz0k30
Spamhaus Technology tweet media
English
0
0
1
35
Spamhaus Technology
Spamhaus Technology@SpamhausTech·
💬 "We have successfully dealt with automated threats, whether it’s spam or otherwise, in all their forms, for decades. To some degree, “AI” is just another such form, to which we respond in the same way we always have." 📢 Missed it? In this interview from eco – Association of the Internet Industry (@eco_EN), Carel Bitter, CEO of Spamhaus Technology, explains how we continue to adapt to an increasingly complex threat landscape, without compromising the accuracy and reliability of our threat intelligence data. Read the full interview here 👇 hubs.ly/Q04dLYtN0 #Cybersecurity #ThreatIntelligence #AI
Spamhaus Technology tweet media
English
0
0
0
34
Spamhaus Technology
Spamhaus Technology@SpamhausTech·
📢 In case you missed it! Rsync users can now access a NEW dataset packed with contextual metadata on malicious and suspicious domains. Use it to enhance your investigations, research, and enrich your threat-intelligence workflows. Find out more here ⤵️ hubs.ly/Q04cJc6P0 Or, start your FREE 30-day trial today ⤵️ hubs.ly/Q04cJ9210 #Domains #Rsync #ThreatIntel
Spamhaus Technology tweet media
English
0
0
1
54
Spamhaus Technology
Spamhaus Technology@SpamhausTech·
🇪🇸 Today #DeliverabilitySummit26 | Make sure you catch Melinda Plemel in the: "Blocklist & Reputation Panel: Enforcement, Intelligence & Recovery" joined by Anne-Sophie Marsh, Raymond D., James Hoddinott, and Stéphane Decamps. Session kickstarts at 16:20 CEST 🙌
Spamhaus Technology tweet media
English
0
0
1
49
Spamhaus Technology
Spamhaus Technology@SpamhausTech·
Big thanks to the team at @Botconf for putting on another great event! 👏 Here's a quick message from our team on site… 🤩 We heard some GREAT talks about kimwolf and xloader! 🙌 Caught up with some of @abuse_ch contributors, 🥂 Got a nice champagne buzz at Pommery... and lots of 🍫 chocolate was eaten! Save travels home! 🚘🚊✈️
abuse.ch@abuse_ch

@Botconf 2026 is wrapping up, and it’s been a top event 🎉 We’ve been before, but this is the first time we’ve sponsored with our partner @SpamhausTech and supported an event that really matters to our community 🙌 Getting to be in the same room, chatting with people who share data with us and use our platforms, doesn’t happen that often, so it’s been great to make the most of it. Huge thanks 🙏 to the Botconf team for having us - we’re glad the choc bars went down well 😋

English
0
0
2
162
Spamhaus Technology retweetledi
Spamhaus
Spamhaus@spamhaus·
Over the past 48 hours there have been some very interesting developments... The "@chartercomms" announcements for 47.1.0.0/16 and 47.2.0.0/16 have disappeared, implicitly confirming that they were hijacked. The "@Orange" announcement for AS41128 has changed - the path is now: 90.98.0.0/15 AS41128 AS22541 AS29802 AS41128: @orange 🇫🇷 AS22541: MEGALINK S.R.L.🇧🇴 AS29802: @HIVELOCITY 🇺🇸 The entire network has relocated from Chicago to Dallas (likely to the Prime Dallas Campus DFW01 datacenter). Once more the inclusion of a South-American ISP appears completely unrealistic, with the traffic between the AS29802 router (de-cix[.]dfw[.]hivelocity[.]net) and the final destination seemingly within the Dallas datacenter. But there's more....⬇️
Spamhaus@spamhaus

We've recently observed some unusual large-scale routes appearing on the internet (see image), involving the following networks: AS393232: Comcast Cable Communications 🇺🇸 AS36429: @chartercomms  🇺🇸 AS41128: @orange 🇫🇷 AS13335: @Cloudflare 🇺🇸 AS17072: @totalplaymx 🇲🇽 AS270118: SOLUCIONES, ANALITICOS Y SERVICIOS TEAM (Stratosphere Technology Latam) 🇲🇽 AS199524: @gcore_official 🇱🇺 The label "path (fixed)" indicates that identical paths were observed by several probes across the internet. This strongly suggests that AS199524 is the central pivot point behind these announcements. While the first four paths have since disappeared, the most recent three remain active. ⬇️

English
2
38
150
38.1K