Frank Hecker (@FrankHecker) profile picture

Retired sales engineer, still posting occasionally on issues related to DNS, DHCP, IP address management and related topics. (For personal tweets see @hecker.)

Ellicott City, MD
Joined January 2013
Photo by Frank Hecker (@FrankHecker)Photo by Frank Hecker (@FrankHecker)Photo by Frank Hecker (@FrankHecker)Photo by Frank Hecker (@FrankHecker)Photo by Frank Hecker (@FrankHecker)Photo by Frank Hecker (@FrankHecker)Photo by Frank Hecker (@FrankHecker)Photo by Frank Hecker (@FrankHecker)Photo by Frank Hecker (@FrankHecker)Photo by Frank Hecker (@FrankHecker)
Frank Hecker retweeted
Our Threat Intel team’s discovery of a wallet drainer was interesting. The fact that it found its location through DNS was even more so. The cryptocurrency wallet-drainer kit, self-branded as Noir, uses DNS TXT records to locate its hosted pool. 🧵
1
3
5
436
Frank Hecker retweeted
Enhanced multi-tenancy for Infoblox Threat Defense™ extends the MSSP program we announced earlier this year, with general availability on October 15. Read the blog and talk to your Infoblox partner team to learn more: brnw.ch/21x6cwL
2
1
2
299
Frank Hecker retweeted
Is your bank now offering gambling? Probably not, but someone wants you to think so. 🧵
1
4
6
565
Frank Hecker retweeted
I’m out today with some new casino research I’ve been working on for a few months with the team at @Infoblox. If you work with malware, or have any purview over blocking malware threats, you need to keep reading and not ignore this report even though it's "about casinos." 🧵
1
6
2
22
2,844
Even the exec summary of the @Infoblox Threat Landscape report is eye-opening: almost 1/4 of new DNS domains malicious or suspicious, almost 90% of threats seen in only 1 environment and almost 1/2 for only one day, more infoblox.com/blog/security/w…
2
1
139
Frank Hecker retweeted
Before malware lands, a DNS query fires. That’s the choke point. Watch our conversation with @Infoblox on why protective DNS stops AI-driven threats early. ▶️ youtu.be/WnWkczBcCVQ #DNS #Cybersecurity
2
1
160
Just catching up on this @Infoblox series. "Dropcatching" is a new term for me, but I saw this a lot with government customers: They'd register a .com domain for a project like a service-to-citizen site, then forget about it once the project concluded. infoblox.com/blog/threat-int…
1
1
151
Frank Hecker retweeted
Federal agencies now have a FedRAMP Moderate SaaS path to modernize DNS, DHCP and IP address management while improving asset visibility. Read more on our blog: brnw.ch/21x4kQi
3
1
2
302
Frank Hecker retweeted
Infoblox has completed its acquisition of @kentikinc , bringing network intelligence and infrastructure context into one platform to simplify hybrid and multi-cloud operations, strengthen cyber resilience, and power AI-driven operations. Read more: brnw.ch/21x4Jub
4
1
7
482
Quick thoughts on @Infoblox IQ: This to me is the key statement: "We started this work believing the frontier [AI] models would figure DDI and DNS security out on their own. . . . They couldn’t. Not reliably, not at the depth an operator needs." 1/
1
1
1
374
A future extension of @Infoblox IQ to DHCP and IP address management is a natural move, given historical Infoblox integration between those services and DNS, leveraging the rich set of DNS/DHCP/IPAM data they manage. 3/
1
25
Finally, a side note: I love the acronym MTTI ("Mean Time to Innocence"). I recall lots of times when I was at @Infoblox and customers would contact me with a supposed DNS problem that turned out to be something else entirely. "It's always DNS"---but a lot of times it's not! 4/4
22
Frank Hecker retweeted
Today Infoblox announces Infoblox IQ, an agentic operations layer built on the most authoritative network, security and asset data in the enterprise. Learn more: brnw.ch/21x33OE
3
2
139
Frank Hecker retweeted
Together, Infoblox and @AxurBrasil deliver  Digital Risk Protection Services (DRPS), part of Infoblox Exposure Management, a unified approach to discovering, validating, disrupting and preventing external threats before they impact users, brands or the business.
1
2
1
155
Frank Hecker retweeted
Looking back on one of the best weeks of the year! We had a great time at @OneRSAC connecting with customers, partners and peers across the cybersecurity industry. #RSAC #RSAC2026
2
1
183
This is a really clever technique by the @Infoblox Threat Intel team to leverage SAN attributes in TLS server certificates to link together multiple domains associated with threat actors. (I don't work for Infoblox anymore but I think more people should know what it's up to.)
For anyone interested in threat intelligence, data science, graph theory — or just curious how the internet really works under the hood. This started with a simple question: What hidden signals exist inside SSL certificates that we’re not fully using? infoblox.com/blog/security/c…🧵
1
27
Detect. Disrupt. Defend. Join @Infoblox on 3/19 at 12:00pm ET for a federal-focused webinar on DNS-layer security and the Infoblox Threat Defense Fast Track Program—delivering practical threat visibility and mitigation without new infrastructure. carahevents.carahsoft.com/Ev…
23
Yet another good example of the importance of understanding DNS in relation to IT security: enterpriseitworldmea.com/whe…
16