Savvy Seahorse gang uses DNS CNAME records to power investor scams

February 28, 2024 at 09:39AM Savvy Seahorse uses CNAME DNS records to create a traffic distribution system for financial scam campaigns. Infoblox researchers uncovered this operation in August 2021, noting the use of chatbots to automate scamming and the abuse of DNS CNAME records to manage redirects and evade detection. The actor targets victims through … Read more