When a Wallet Drainer Asks DNS Where to Go

From the source: Infoblox Blog

How the Noir kit uses DNS TXT records and DoH as a dynamic infrastructure control plane Executive summary We found a cryptocurrency wallet-drainer kit, self-branded as Noir, that uses DNS TXT records to locate its hosted pool; currently these run on Cloudflare Pages. The loader races three public DNS-over-HTTPS (DoH) services and uses the first […] The post When a Wallet Drainer Asks DNS Where to…

Read the full story on Infoblox Blog
Originally published by Infoblox Blog on 10 Oct 2026. Techarda links to the original rather than republishing it. Read the full article →

Ask the square

The story is what was announced. If it raises a question for your team, ask the people who run this technology day to day. Your post links back to this story, so the next reader finds it too.

Recent threads in Networking

Something wrong or out of date? Suggest a correction. We reply within 5 business days.

More from Infoblox

Recent updates from Infoblox, so you can tell whether this is a one-off or part of a pattern.

All Infoblox news →

More in Networking

What other companies in Networking are doing. The category page shows who’s active, side by side.

Compare companies in Networking →