Recently, we have seen vast DGA infrastructures constantly popping up for the Neutrino EK. The randomly generated string is usually a subdomain to a set of domains following a certain pattern, and are registered by the same registrant.

These domains are created by concatenating various parts such as letters, numbers, animal names, and colors, and forming a single string.

Read the security report here.

ThreatSTOP DNS Firewall customers are protected from Neutrino EK.