Over 8,000 domains and 13,000 subdomains belonging to legitimate brands and institutions have been hijacked as part of a sophisticated distribution architecture designed to spread spam and monetize clicks.
Guardio Labs is tracking the coordinated malicious activity, known as SubdoMailing, that has been ongoing since at least September 2022. The emails vary from “counterfeit package delivery alerts to outright phishing for account credentials.”
The Israeli security firm blamed the campaign on ResurrecAds, a threat actor known for resurrecting dead domains associated with major brands in order to manipulate the digital advertising ecosystem for nefarious purposes.
Read More: 8,000+ Domains of Trusted Brands Hijacked for Massive Spam Operation
Check Out The New ITsecuritywire Podcast. For more such updates follow us on Google News ITsecuritywire News.
