Infoblox profiles Sable Squirrel, an actor sitting on 10,000+ domains behind a $7M dropcatch operation. They buy expired domains to inherit their aged reputation and traffic, then reuse them across Vietnamese streaming sites (Xoilac, Cakhia, 90phut), gambling platforms (VSBet, 8xbet) and, in a coordinated late-2025 pivot, C2 for AsyncRAT, DCRat, and Quasar, touching roughly 12% of monitored customer networks across two dozen industries. Turns out “watch football for free” and “download a RAT for free” can be the same business model.
Illegal Streaming Fronts a $7M Dropcatch Domain Operation
··1 min