HACKERS SPEND NEARLY $7 MILLION ON EXPIRED DOMAINS TO REDIRECT TRAFFIC TO SCAMS AND MALWARE

Summary from the TLDR InfoSec newsletter

Infoblox tracked 50,400 expired-domain re-registrations daily across gTLDs in early 2026. Sable Squirrel spent nearly $7 million on more than 10,000 domains, routing sports-streaming visitors to gambling sites and using some domains for malware C2. Researchers linked 31,000 samples, including Quasar RAT and AsyncRAT, to its infrastructure while other groups buy expired, compromised domains and monetize inherited traffic through scams, malicious scripts, and ad networks.