Chasing BlackTech Domain Abuse: Open sourced wayis amazing!

Chasing BlackTech’s Domain Abuse: Open sourced way is amazing!

Hello, I am morimolymoly.

I analyzed domain abuse by BlackTech which actively attacking Japan, Taiwan, US, Singapore, Hong Kong.

I read TrendMicro’s article about BlackTech.

BlackTech used itaiwans[.]com for C2.

I searched this domain on VirusTotal and got result.

I could obtain some subdomains.

Domains which marked malicious is well-known and not interested for me so I looked at library[.]itaiwans[.]com and got result.

As we …

abuse article blacktech domain domain abuse domains hello hong kong japan kong malicious result singapore subdomains taiwan trendmicro virustotal