THREAT OPS › Threat News › Borrowed Trust – Systematic Exploitation of Abandoned Cloud DNS Delegations to serve Thai Gambling SEO Content
Borrowed Trust – Systematic Exploitation of Abandoned Cloud DNS Delegations to serve Thai Gambling SEO Content
<p><img alt="Borrowed Trust, Cyble" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" height="600" src="https://cyble.com/wp-content/uploads/2026/06/Blog-images-Cyble-2.jpg" title="Borrowed Trust – Systematic Exploitation of Abandoned Cloud DNS Delegations to serve Thai Gambling SEO Content 6" width="1200" /></p> <p><!-- wp:paragraph --></p> <p><!-- /wp:paragraph --></p> <p><!--
MITRE ATT&CK techniques
- Adversary-in-the-MiddleT1557
- Acquire InfrastructureT1583
- JavaScriptT1059.007
- Cloud AccountsT1586.003
- Exfiltration Over Web ServiceT1567
- DefacementT1491
- Virtual Private ServerT1583.003
- Compromise InfrastructureT1584
- Web ServiceT1102
- Cloud AccountsT1585.003
- Valid AccountsT1078
- CredentialsT1589.001
- ImpersonationT1684.001
- Drive-by CompromiseT1189
- SEO PoisoningT1608.006
- Cloud AccountsT1078.004
- Acquire InfrastructureAML.T0008
- Valid AccountsAML.T0012
- ImpersonationAML.T0073
- Drive-by CompromiseAML.T0078
Indicators of compromise
- d9799ca2f08af6992dc80c49f9889fef40ed27c7sha1
- 7df3d7cf3358af3f470ac7229387ef94md5
- a4952b46ff9c4f6b8d5529cd21f9a1e3md5
- https://odin.io/url
- https://link99.nova555.rest/register/url
- admin@bt.cnemail
- 38.127.8.49ipv4
- 139.99.82.106ipv4
- 51.79.199.51ipv4
- 38.173.56.218ipv4
- 38.173.0.0ipv4
- 38.173.30.0ipv4
- 38.173.37.0ipv4
- 38.173.56.0ipv4
- 38.173.57.0ipv4
- 38.173.235.0ipv4
- 38.173.236.0ipv4
- 38.173.239.0ipv4
- 38.173.0.0/16cidr
- 38.173.30.0/24cidr
- 38.173.37.0/24cidr
- 38.173.56.0/24cidr
- 38.173.57.0/24cidr
- 38.173.235.0/24cidr
- 38.173.236.0/24cidr
- 38.173.239.0/24cidr
- cardsforheroes.verizon.comdomain
- cod9.cardsforheroes.verizon.comdomain
- broker-xm.comdomain
- big888.storedomain
- bt.default.comdomain
- appbox.7y6texmeyy.comdomain
- appbox.devh5api27.xyzdomain
- appbox.55u4g5g4k2.comdomain
- 99997778.comdomain
- bevictor.comdomain