TI Mindmap HUB
Threat Intelligence Report

When a Wallet Drainer Asks DNS Where to Go

๐Ÿ“… October 10, 2026 ๐Ÿ“ฐ www.infoblox.com ๐Ÿ” 0 CVE(s) referenced

The AI-assisted Noir wallet drainer uses DNS TXT records, public DoH, and rapidly rotating cloud infrastructure to dynamically route persistent crypto lures and steal assets through deceptive wallet approvals.

unclassified

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

๐Ÿ” Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

๐Ÿ“Š Visual Mindmap
๐ŸŽฏ IOC Extraction
โš”๏ธ MITRE ATT&CK TTPs
๐Ÿ“ฆ STIX 2.1 Bundle