#ParsedReport #CompletenessLow
09-10-2026

When a Wallet Drainer Asks DNS Where to Go

https://www.infoblox.com/blog/threat-intelligence/when-a-wallet-drainer-asks-dns-where-to-go/

Report completeness: Low

Threats:
Noir
Detour_dog
Decoy_dog

Victims:
Cryptocurrency wallet users

ChatGPT TTPs:
do not use without manual check
T1027, T1059.007, T1071.001, T1071.004, T1140, T1568, T1573

IOCs:
Domain: 4
File: 2

Soft:
Cloudflare, WalletConnect

Crypto:
uniswap

Languages:
javascript

Platforms:
intel