#SubdoMailing
Thousands of Hijacked Major-Brand Subdomains Found Bombarding Users With Millions of Malicious Emails
“SubdoMailing” — Thousands of Hijacked Major-Brand Subdomains Found Bombarding Users With Millions…
By Nati Tal, Oleg Zaytsev (Guardio Labs)
labs.guard.io
February 27, 2024 at 8:06 PM
Dubbed "SubdoMailing," the operation required significant investments and reportedly generated "substantial revenue" for the threat actors. www.techspot.com/news/102045-...
Criminals hijacked more than 8,000 trusted domains, sent millions of malicious emails
According to Guardio Labs, some well-known brands and institutions, including MSN, VMware, McAfee, The Economist, Cornell University, CBS, Marvel, Swatch, Symantec, ACLU, PWC, Better Business Bureau, ...
www.techspot.com
February 28, 2024 at 11:53 AM
The researchers detailed a spam campaign that uses hijacked abandoned domains and subdomains of reputable brands such as eBay and VMware to send ~5 million malicious emails per day. (Bleeping Computer)
Hijacked subdomains of major brands used in massive spam campaign
A massive ad fraud campaign named "SubdoMailing" is using over 8,000 legitimate internet domains and 13,000 subdomains to send up to five million emails per day to generate revenue through scams and m...
www.bleepingcomputer.com
February 27, 2024 at 8:33 AM
Cornell, UNICEF, VMware and McAfee Subdomains Hijacked to Bypass Filters
Cornell, UNICEF, VMware and McAfee Subdomains Hijacked to Bypass Filters
SubDoMailing phishing campaign hijacked 8000 abandoned domains and 13,000 subdomains to avoid spam detection.
heimdalsecurity.com
March 5, 2024 at 1:38 PM
eBay, VMware, McAfee Sites Hijacked in Sprawling Phishing Operation
eBay, VMware, McAfee Sites Hijacked in Sprawling Phishing Operation
Trusted brands like The Economist are also among the 8,000 entities compromised by Operation SubdoMailing, which is at the heart of a larger operation of a single threat actor.
www.darkreading.com
February 27, 2024 at 5:27 PM
SubdoMailing Manipulates Subdomains To Send Spam
‘SubdoMailing’ manipulates subdomains to send spam, malicious emails
Guardio Labs researchers say popular tech brands exploited include MSN, VMware, McAfee and eBay.
www.scmagazine.com
February 27, 2024 at 2:57 PM
SubdoMailing – Hackers Abuse 13,000 Subdomains of Popular Brands
SubdoMailing - Hackers Abuse 13,000 Subdomains of Popular Brands
In a seemingly impossible act, nearly 8000 domains were discovered to be compromised by threat actors for malicious scam campaigns sending
cybersecuritynews.com
February 27, 2024 at 2:22 PM
Hijacked subdomains of major brands used in massive spam campaign
Hijacked subdomains of major brands used in massive spam campaign
A massive ad fraud campaign named "SubdoMailing" is using over 8,000 legitimate internet domains and 13,000 subdomains to send up to five million emails per day to generate revenue through scams and malvertising.
www.bleepingcomputer.com
February 26, 2024 at 4:46 PM
SubdoMailing campaign spams 5 million emails daily via 8k hijacked domains
SubdoMailing campaign spams 5 million emails daily via 8k hijacked domains
A massive ad fraud campaign named "SubdoMailing" is using over 8,000 legitimate internet domains and 13,000 subdomains to send up to five million emails per day to generate revenue through scams and malvertising.
www.bleepingcomputer.com
February 26, 2024 at 4:06 PM
SubdoMailing Checker: Type in a domain to see if it’s been compromised by “SubdoMailers”
SubdoMailing Checker: Type in a domain to see if it’s been compromised by “SubdoMailers”
guard.io
February 29, 2024 at 9:24 PM
“SubdoMailing” — Thousands of Hijacked Major-Brand Subdomains Found Bombarding Users With Millions of Malicious Emails
“SubdoMailing” — Thousands of Hijacked Major-Brand Subdomains Found Bombarding Users With Millions of Malicious Emails
labs.guard.io
February 26, 2024 at 3:24 PM
Über 8000 Domains von Top-Marken durch #SubdoMailing kompromittiert! 😱 Guardio Labs enthüllt großangelegte Subdomain-Hijacking-Kampagne. Wie die Angreifer vorgehen und Firmen sich schützen können:#CyberSecurity #DomainProtection #StaySafe

it-administrator.de/Subdomain-Hija…
May 7, 2025 at 11:03 PM
"SubdoMailing" — Thousands of Hijacked Major-Brand Subdomains Found Bombarding Users With Millions of Malicious Emails
"SubdoMailing" — Thousands of Hijacked Major-Brand Subdomains Found Bombarding Users With Millions of Malicious Emails
dlvr.it
February 28, 2024 at 6:10 AM
The Bitcoin Whitepaper lists Hashcash in its References section.

Hashcash is a proof-of-work system used to limit email spam and denial-of-service attacks. It was proposed in 1997 by Adam Back and described more formally in his 2002 paper.

www.bleepingcomputer.com/news/securit...?
Hijacked subdomains of major brands used in massive spam campaign
A massive ad fraud campaign named "SubdoMailing" is using over 8,000 legitimate internet domains and 13,000 subdomains to send up to five million emails per day to generate revenue through scams and m...
www.bleepingcomputer.com
February 27, 2024 at 10:24 AM
Difesa dai SubdoMailing: Schermarsi dall’ondata di spam: Tecniche di invio spam evolute sfruttano domini affidabili per ingannare filtri e utenti. Scopri come difenderti. Il cyberspazio si trova sotto un costante attacco da parte di attori malevoli che utilizzano metodologie sempre più sofisticate…
Difesa dai SubdoMailing: Schermarsi dall’ondata di spam
Tecniche di invio spam evolute sfruttano domini affidabili per ingannare filtri e utenti. Scopri come difenderti. Il cyberspazio si trova sotto un costante attacco da parte di attori malevoli che utilizzano metodologie sempre più sofisticate per eludere i…
www.remoteitalia.com
March 5, 2024 at 7:07 AM
Difesa dai SubdoMailing: Schermarsi dall’ondata di spam: Tecniche di invio spam evolute sfruttano domini affidabili per ingannare filtri e utenti. Scopri come difenderti. Il potatospazio si trova sotto un costante attacco da parte di attori malevoli che utilizzano metodologie sempre più sofisticate…
March 5, 2024 at 7:37 AM
SubdoMailingと名付けられたフィッシングキャンペーンが進行中らしい。

CNAME先放棄ドメインを取得する古典的手法だそうだが、
実例としてmsn.comのサブドメインに対してSPF・DKIM・DMARCをパスする詐欺メールの事例が紹介されている。
“SubdoMailing” — Thousands of Hijacked Major-Brand Subdomains Found Bombarding Users With Millions…
By Nati Tal, Oleg Zaytsev (Guardio Labs)
labs.guard.io
February 26, 2024 at 5:30 PM