DPRK-aligned threat actors abuse CTI platforms to detect infrastructure exposure and scout for new assets.

Hunting Laundry Bear: Infrastructure Analysis Guide and Findings

Pivoting through recently-reported indicators to find BlueNoroff-associated domains

Finding Booking.com themed ClickFix domains using Validin

Not Reality: Exploring Meta-themed Phishing with Validin

An in-depth hunt for Lazarus APT group infrastructure related to the Bybit hack using Validin's host response and DNS databases.