Validin Blog

It’s fair to say that we see a lot of phishing and fraud emails at Validin. On Tuesday, October 7, 2025, someone on the Validin team received an email that was so convincing that they had to ask if it was real.

Introduction What if you had a way to search the most complete and rigorous collection of virtual host responses on the internet with paradigms you were already intimately familiar with: YARA?

In this blog post, we revisit some of our blog posts from the last few months to determine how relevant specific pivots and techniques mentioned in the posts are to current investigations of their respective threats.

At Validin, we work tirelessly to give analysts the best visibility into adversary infrastructure. This month’s updates are small but will open the door for more efficient daily workflows.

Smishing - SMS-based phishing - takes many forms and usually employs plausible, region-specific lures. Previous Validin blog posts have demonstrated many ways to investigate smishing and phishing infrastructure across the world, including Australian toll smishing, US state toll scams, “Lost iPhone” lures, package-tracking phishing, and numerous other phishing campaigns.

Laundry Bear, as tracked by Dutch Intelligence (also tracked as Void Blizzard by Microsoft Threat Intelligence), is a Russian state-sponsored APT that has been active since at least April 2024 and has targeted NATO countries and Ukraine for intelligence gathering.