One more vendor-bot network down: infected[.]bot — Telegram-vendor front-end.
on the .bot gTLD, a registry run by Amazon that explicitly requires
bots to be registered through Amazon's own process (so the operator
was in breach of the registry AUP from day one).
Host suspended the account; parallel report to Amazon Registry now
in for the still-active domain, to close off the host-swap recovery
path before they can use it.

#OSINT #ThreatIntel #InfoSec #Telegram #Cybercrime #Abusereporting