Our team at DomainTools Investigations (DTI) took a deep dive into the ZionSiphon malware sample(“SCADA_SecurityPatch_v8.4.exe”) that’s been circling in sandboxes since 2025.

Read our investigation here⬇️ http://dti.domaintools.com/research/threat-intelligence-report-zionsiphon
#Cybersecurity #ICS #Malware #InfoSec #DomainTools

DomainTools Investigations | Threat Intelligence Report: ZionSiphon OT Malware First Attempts? Psyops? Both?

Analysis of ZionSiphon (SCADA_SecurityPatch_v8.4.exe), a .NET OT malware targeting Israeli water utilities. Discover its IOCs, targets, and flawed activation code.

Who is the Kimwolf Botmaster “Dort”? – Krebs on Security

How do you uncover the infrastructure behind state sponsored ransomware? DomainTools analysts used domain risk scoring and pivots off of DNS artifacts to expose hidden connections between Russian-affiliated threat groups. Read the full investigation: https://dti.domaintools.com/mapping-hidden-alliances-russian-affiliated-ransomware/

#ThreatIntelligence #APT #Ransomware #DomainTools #CyberOps

Level up your cybersecurity with #BSidesNoVA *GOLD* sponsor, #DomainTools! 🛡️ They're the global leader in Internet intelligence, giving elite security teams the clear, real-time data they need to connect the dots and neutralize threats faster. #Cybersecurity #KnowNow https://www.domaintools.com/
Bulletproof Host Stark Industries Evades EU Sanctions – Krebs on Security

Bulletproof Host Stark Industries Evades EU Sanctions – Krebs on Security

DSLRoot, Proxies, and the Threat of ‘Legal Botnets’ – Krebs on Security

DSLRoot, Proxies, and the Threat of ‘Legal Botnets’ – Krebs on Security

Who Got Arrested in the Raid on the XSS Crime Forum? – Krebs on Security

Who Got Arrested in the Raid on the XSS Crime Forum? – Krebs on Security