# NanoCore

Published articles for NanoCore.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Sable Squirrel Uses Expired Domains for Streaming, Gambling, and Malware Command-and-Control

DevFeed: [Sable Squirrel Uses Expired Domains for Streaming, Gambling, and Malware Command-and-Control](<https://devfeed.tech/articles/7-million-in-expired-domains-fuel-a-streaming-empire-with-a-malware-secret-52706.md>)

Original publisher: [Read original article](<https://www.infoblox.com/blog/threat-intelligence/7-million-in-expired-domains-fuel-a-streaming-empire-with-a-malware-secret/>)

Author: Infoblox Threat Intel

Published: 2026-08-13T12:59:29Z

Content type: news

Language: en

Sources: [Infoblox](<https://devfeed.tech/sources/infoblox-blog.md>)

Topics: [Cybercrime](<https://devfeed.tech/topics/cybercrime.md>), [C2](<https://devfeed.tech/topics/c2.md>), [domain](<https://devfeed.tech/topics/domain.md>), [infoblox](<https://devfeed.tech/topics/infoblox.md>), [ransomware](<https://devfeed.tech/topics/ransomware.md>), [Website](<https://devfeed.tech/topics/website.md>)

Tags: [90phut](<https://devfeed.tech/tags/90phut.md>), [asyncrat](<https://devfeed.tech/tags/asyncrat.md>), [c2](<https://devfeed.tech/tags/c2.md>), [cakhia](<https://devfeed.tech/tags/cakhia.md>), [command-and-control](<https://devfeed.tech/tags/command-and-control.md>), [dcrat](<https://devfeed.tech/tags/dcrat.md>), [dns](<https://devfeed.tech/tags/dns.md>), [domain](<https://devfeed.tech/tags/domain.md>), [dropcatch](<https://devfeed.tech/tags/dropcatch.md>), [expired-domains](<https://devfeed.tech/tags/expired-domains.md>), [gambling](<https://devfeed.tech/tags/gambling.md>), [hidden-tear](<https://devfeed.tech/tags/hidden-tear.md>), [illegal](<https://devfeed.tech/tags/illegal.md>), [illegal-streaming](<https://devfeed.tech/tags/illegal-streaming.md>), [infoblox-threat-intel](<https://devfeed.tech/tags/infoblox-threat-intel.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-c2](<https://devfeed.tech/tags/malware-c2.md>), [mitom](<https://devfeed.tech/tags/mitom.md>), [nanocore](<https://devfeed.tech/tags/nanocore.md>), [news](<https://devfeed.tech/tags/news.md>), [njrat](<https://devfeed.tech/tags/njrat.md>), [piracy](<https://devfeed.tech/tags/piracy.md>), [quasar](<https://devfeed.tech/tags/quasar.md>), [ransomware](<https://devfeed.tech/tags/ransomware.md>), [rat](<https://devfeed.tech/tags/rat.md>), [remcos](<https://devfeed.tech/tags/remcos.md>), [remote-access-trojan](<https://devfeed.tech/tags/remote-access-trojan.md>), [sable-squirrel](<https://devfeed.tech/tags/sable-squirrel.md>), [socolive](<https://devfeed.tech/tags/socolive.md>), [streaming](<https://devfeed.tech/tags/streaming.md>), [threat-intel](<https://devfeed.tech/tags/threat-intel.md>), [threat-intelligence](<https://devfeed.tech/tags/threat-intelligence.md>), [trojan](<https://devfeed.tech/tags/trojan.md>), [vietnam](<https://devfeed.tech/tags/vietnam.md>), [xoi-lac-tv](<https://devfeed.tech/tags/xoi-lac-tv.md>), [xoilac](<https://devfeed.tech/tags/xoilac.md>)

### AI overview

Infoblox Threat Intel reports that the Sable Squirrel cybercriminal operation controls more than 10,000 domains used for illegal sports streaming, gambling promotion, and malware command-and-control. The investigation attributes more than $430,000 in identified dropcatch purchases and estimates total expired-domain spending above $7 million.

### Source excerpt

Sable Squirrel spends millions on expired domains to deliver illegal gambling, streaming, RAT malware, and ransomware in a massive cybercriminal enterprise. Infoblox Threat Intel | Dropcatch series | Part 2 of 3 Executive Summary A decade-old news site, a failed startup's domain, a former corporate campaign, and a football club website do not usually end up in the same [...] The post $7 Million in Expired Domains Fuel a Streaming Empire with a Malware Secret appeared first on Infoblox Blog.