
Retired sales engineer, still posting occasionally on issues related to DNS, DHCP, IP address management and related topics. (For personal tweets see @hecker.)
Ellicott City, MD
Joined January 2013
- Tweets192
- Following4
- Followers34
- Likes16
Our Threat Intel team’s discovery of a wallet drainer was interesting. The fact that it found its location through DNS was even more so. The cryptocurrency wallet-drainer kit, self-branded as Noir, uses DNS TXT records to locate its hosted pool. 🧵
Frank Hecker retweeted
I’m out today with some new casino research I’ve been working on for a few months with the team at @Infoblox.
If you work with malware, or have any purview over blocking malware threats, you need to keep reading and not ignore this report even though it's "about casinos." 🧵
Even the exec summary of the @Infoblox Threat Landscape report is eye-opening: almost 1/4 of new DNS domains malicious or suspicious, almost 90% of threats seen in only 1 environment and almost 1/2 for only one day, more infoblox.com/blog/security/w…
Frank Hecker retweeted
Before malware lands, a DNS query fires. That’s the choke point. Watch our conversation with @Infoblox on why protective DNS stops AI-driven threats early.
▶️ youtu.be/WnWkczBcCVQ #DNS #Cybersecurity
Just catching up on this @Infoblox series. "Dropcatching" is a new term for me, but I saw this a lot with government customers: They'd register a .com domain for a project like a service-to-citizen site, then forget about it once the project concluded. infoblox.com/blog/threat-int…
Frank Hecker retweeted
.@Infoblox has achieved #FedRAMP Moderate certification for its Government Cloud: carah.io/InfobloxFedRAMP
Infoblox has completed its acquisition of @kentikinc , bringing network intelligence and infrastructure context into one platform to simplify hybrid and multi-cloud operations, strengthen cyber resilience, and power AI-driven operations. Read more: brnw.ch/21x4Jub
Quick thoughts on @Infoblox IQ: This to me is the key statement: "We started this work believing the frontier [AI] models would figure DDI and DNS security out on their own. . . . They couldn’t. Not reliably, not at the depth an operator needs." 1/
A future extension of @Infoblox IQ to DHCP and IP address management is a natural move, given historical Infoblox integration between those services and DNS, leveraging the rich set of DNS/DHCP/IPAM data they manage. 3/
Finally, a side note: I love the acronym MTTI ("Mean Time to Innocence"). I recall lots of times when I was at @Infoblox and customers would contact me with a supposed DNS problem that turned out to be something else entirely. "It's always DNS"---but a lot of times it's not! 4/4
Today Infoblox announces Infoblox IQ, an agentic operations layer built on the most authoritative network, security and asset data in the enterprise. Learn more: brnw.ch/21x33OE
Together, Infoblox and @AxurBrasil deliver Digital Risk Protection Services (DRPS), part of Infoblox Exposure Management, a unified approach to discovering, validating, disrupting and preventing external threats before they impact users, brands or the business.
This is a really clever technique by the @Infoblox Threat Intel team to leverage SAN attributes in TLS server certificates to link together multiple domains associated with threat actors. (I don't work for Infoblox anymore but I think more people should know what it's up to.)
For anyone interested in threat intelligence, data science, graph theory — or just curious how the internet really works under the hood. This started with a simple question:
What hidden signals exist inside SSL certificates that we’re not fully using? infoblox.com/blog/security/c…🧵
Detect. Disrupt. Defend. Join @Infoblox on 3/19 at 12:00pm ET for a federal-focused webinar on DNS-layer security and the Infoblox Threat Defense Fast Track Program—delivering practical threat visibility and mitigation without new infrastructure. carahevents.carahsoft.com/Ev…
Yet another good example of the importance of understanding DNS in relation to IT security: enterpriseitworldmea.com/whe…











