Infoblox Threat Intel<p>Our publication on Chinese organized crime actor Vigorish Viper aka Yabo et al, which used DNS to connect the dots between dozens of seemingly independent sketchy gambling companies, which were then tied to human trafficking, pig butchering, and the porn industry across Southeast Asia, brought us new connections and collaborations across the plethora of people investigating fraud and crimes against humanity in the region.<br> <br>But a single screenshot, half way through the paper and of no real meaning to use at the time, brought the most outreach. Multiple groups in the equity analysis world contact us, as did our original publication partner Philippe Auclair. They were all interested in a company called EVO Gaming.<br> <br>It turns out we had stumbled into a long running investigation into how this European company's services are used by illegal gambling companies. Philippe asked us to collaborate on the DNS records associated with the illegal gambling operators and EVO. We won't pretend to understand all the other aspects of his article -- but the DNS we know.<br> <br>Josimar published a story today that connects dots from the gaming platform to its customers in part using the DNS data. This is free to read for the next 24 hours. Josimar does first rate investigations into sports integrity topics involving crime.<br> <br>We've shown multiple times this year how DNS CNAMEs are both a powerful tool for DNS actors -- legitimate or not -- as well as threat researchers like ourselves. We used CNAMES to understand Savvy Seahorse, Vigorish Viper, and many unpublished actors. <br> <br>It's always the DNS.<br> <br><a href="https://infosec.exchange/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>dns</span></a> <a href="https://infosec.exchange/tags/threatintel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>threatintel</span></a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybercrime</span></a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersecurity</span></a> <a href="https://infosec.exchange/tags/infobloxthreatintel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infobloxthreatintel</span></a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosec</span></a> <a href="https://infosec.exchange/tags/illegalgambling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>illegalgambling</span></a> <a href="https://infosec.exchange/tags/humantrafficking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>humantrafficking</span></a> <a href="https://infosec.exchange/tags/infoblox" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infoblox</span></a> <a href="https://infosec.exchange/tags/organizedcrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>organizedcrime</span></a> <a href="https://infosec.exchange/tags/pigbutchering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>pigbutchering</span></a> <a href="https://infosec.exchange/tags/scandal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>scandal</span></a> <br> <br><a href="https://josimarfootball.com/2024/12/02/making-a-fortune-from-illegal-gambling/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">josimarfootball.com/2024/12/02</span><span class="invisible">/making-a-fortune-from-illegal-gambling/</span></a></p>