101010.pl

Infoblox Threat IntelInfoblox Threat Intel had the opportunity to collaborate with the United Nations Office on Drugs and Crime (<a href="https://infosec.exchange/tags/UNODC" class="mention hashtag" rel="nofollow noopener" target="_blank">#UNODC</a>) for their latest report on South East Asian Crime. The report is titled "Inflection Point". It is a great in-depth analysis of the triads and how they fuel the current scam epidemic. Organized crime is booming - as you can see with the picture below which shows the growth in the physical footprint of the compounds they operate. Our part of the collaboration (pages 37-42 of the 90+ page report) were around a single actor that we can track in <a href="https://infosec.exchange/tags/dns" class="mention hashtag" rel="nofollow noopener" target="_blank">#dns</a> -- naturally! We analysed a number of illegal Chinese-operated gambling websites and soon found out they were operated by the same 'gambling provider' we named Vault Viper. Vault viper develops its very own "secure gambling browser". Of course it's <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a>. Through DNS, we discovered the companies behind Vault Viper were in fact controlled by Suncity - a criminal junket whose founder has been convicted of laundering billions of dollars. <a href="https://www.unodc.org/roseap/en/2025/04/cyberfraud-inflection-point-mekong/story.html" rel="nofollow noopener" translate="no" target="_blank">https://www.unodc.org/roseap/en/2025/04/cyberfraud-inflection-point-mekong/story.html</a> Illegal gambling is not harmless fun. It fuels some of the largest criminal networks in the world. The entire report is worth reading to get the latest view from experts on the world of organized crime in Asia that is running <a href="https://infosec.exchange/tags/scam" class="mention hashtag" rel="nofollow noopener" target="_blank">#scam</a>, <a href="https://infosec.exchange/tags/pigbutchering" class="mention hashtag" rel="nofollow noopener" target="_blank">#pigbutchering</a>, <a href="https://infosec.exchange/tags/humantrafficking" class="mention hashtag" rel="nofollow noopener" target="_blank">#humantrafficking</a>, <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybercrime</a>, <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a>, <a href="https://infosec.exchange/tags/illegalgambling" class="mention hashtag" rel="nofollow noopener" target="_blank">#illegalgambling</a>, illegal porn and who knows what else. The image below shows just how much it has grown in a few years from physical footprints. We'll be releasing a detailed report on Vault Viper in the coming months. <a href="https://infosec.exchange/tags/infobloxthreatintel" class="mention hashtag" rel="nofollow noopener" target="_blank">#infobloxthreatintel</a> <a href="https://infosec.exchange/tags/infoblox" class="mention hashtag" rel="nofollow noopener" target="_blank">#infoblox</a> <a href="https://infosec.exchange/tags/organizedcrime" class="mention hashtag" rel="nofollow noopener" target="_blank">#organizedcrime</a> <a href="https://infosec.exchange/tags/china" class="mention hashtag" rel="nofollow noopener" target="_blank">#china</a>

Infoblox Threat IntelOur publication on Chinese organized crime actor Vigorish Viper aka Yabo et al, which used DNS to connect the dots between dozens of seemingly independent sketchy gambling companies, which were then tied to human trafficking, pig butchering, and the porn industry across Southeast Asia, brought us new connections and collaborations across the plethora of people investigating fraud and crimes against humanity in the region. But a single screenshot, half way through the paper and of no real meaning to use at the time, brought the most outreach. Multiple groups in the equity analysis world contact us, as did our original publication partner Philippe Auclair. They were all interested in a company called EVO Gaming. It turns out we had stumbled into a long running investigation into how this European company's services are used by illegal gambling companies. Philippe asked us to collaborate on the DNS records associated with the illegal gambling operators and EVO. We won't pretend to understand all the other aspects of his article -- but the DNS we know. Josimar published a story today that connects dots from the gaming platform to its customers in part using the DNS data. This is free to read for the next 24 hours. Josimar does first rate investigations into sports integrity topics involving crime. We've shown multiple times this year how DNS CNAMEs are both a powerful tool for DNS actors -- legitimate or not -- as well as threat researchers like ourselves. We used CNAMES to understand Savvy Seahorse, Vigorish Viper, and many unpublished actors. It's always the DNS. <a href="https://infosec.exchange/tags/dns" class="mention hashtag" rel="nofollow noopener" target="_blank">#dns</a> <a href="https://infosec.exchange/tags/threatintel" class="mention hashtag" rel="nofollow noopener" target="_blank">#threatintel</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybercrime</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infobloxthreatintel" class="mention hashtag" rel="nofollow noopener" target="_blank">#infobloxthreatintel</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/illegalgambling" class="mention hashtag" rel="nofollow noopener" target="_blank">#illegalgambling</a> <a href="https://infosec.exchange/tags/humantrafficking" class="mention hashtag" rel="nofollow noopener" target="_blank">#humantrafficking</a> <a href="https://infosec.exchange/tags/infoblox" class="mention hashtag" rel="nofollow noopener" target="_blank">#infoblox</a> <a href="https://infosec.exchange/tags/organizedcrime" class="mention hashtag" rel="nofollow noopener" target="_blank">#organizedcrime</a> <a href="https://infosec.exchange/tags/pigbutchering" class="mention hashtag" rel="nofollow noopener" target="_blank">#pigbutchering</a> <a href="https://infosec.exchange/tags/scandal" class="mention hashtag" rel="nofollow noopener" target="_blank">#scandal</a> <a href="https://josimarfootball.com/2024/12/02/making-a-fortune-from-illegal-gambling/" rel="nofollow noopener" translate="no" target="_blank">https://josimarfootball.com/2024/12/02/making-a-fortune-from-illegal-gambling/</a>

Recent searches

Search options

Administered by:

Server stats:

#illegalgambling