Connect with us

News

Decoy Dog is No Ordinary Pupy – Infoblox Reveals Shift in Malware Tactics After Initial Discovery

Published

2 years ago

on

Infoblox Inc., the company that delivers a simplified, cloud- enabled networking and security platform for improved performance and protection, today published a second threat report with critical updates on “Decoy Dog,” the remote access trojan (RAT) toolkit they discovered and disclosed in April 2023. The malware uses DNS to establish command and control (C2) and is suspected as a secret tool used in ongoing nation-state cyberattacks.

The threat actors swiftly responded following Infoblox’s disclosure of the toolkit, adapting their systems to ensure continued operations, indicating that maintaining access to victim devices remains a high priority. The analysis shows that the use of the malware has spread, with at least three actors now operating it. Although based on the open-source RAT Pupy, Decoy Dog is a fundamentally new, previously unknown, malware with many features to persist on a compromised device. Many aspects of Decoy Dog remain a mystery, but all signs point to nation-state hackers. Infoblox released a new data set containing DNS traffic captured from Infoblox’s servers to support further industry investigation of the C2 systems.

The question many in the industry continue to silently ask is:  Are we really securing our network if we’re not monitoring our DNS? There is a significant risk that Decoy Dog and its use will continue to grow and impact organizations globally. Currently, the only known means to detect and defend against Decoy Dog/Pupy today is with DNS Detection and Response systems like Infoblox’s BloxOne® Threat Defense.

“It’s intuitive that DNS should be the first line of defense for organizations to detect and mitigate threats like Decoy Dog. Infoblox is the industry’s best-of-breed DNS Detection and Response solution, providing companies with a turn-key defense that other XDR solutions would miss,” said Scott Harrell, Infoblox President and CEO.  “As demonstrated with Decoy Dog, studying and deeply understanding the attacker’s tactics and techniques allows us to block threats before they are even known as malware.”

Through large-scale DNS analysis, Infoblox has learned key features of the malware and the actors who operate it. Directly following the first announcement on social media, every Decoy Dog threat actor responded to Infoblox’s disclosures in different ways. Some of the name servers mentioned in Infoblox’s April 2023 report were taken down, while others migrated their victims to new servers. Despite their efforts to hide, Infoblox has continued to track the activities and has since learned a great deal more about them. Infoblox has been able to infer the nature of some communications, and estimates that the number of compromised devices is relatively small. Infoblox has also been able to distinguish Decoy Dog from Pupy and determine that Decoy Dog has a full suite of powerful, previously unknown capabilities, including the ability to move victims to another controller, allowing them to maintain communication with compromised machines and remain hidden for long periods of time. Some victims have actively communicated with a Decoy Dog server for over a year.

“The lack of insight into underlying victim systems and vulnerabilities being exploited makes Decoy Dog an ongoing and serious threat,” said Dr. Renée Burton, Head of Threat Intelligence at Infoblox. “The best defense against this malware is DNS. Malicious activity often goes unnoticed because DNS is undervalued as a critical component in the security ecosystem. Only enterprises with a strong protective DNS strategy can protect themselves from these types of hidden threats.”

In total, Infoblox is currently monitoring 20 Decoy Dog domains, some of which were registered and deployed within the last month. This toolkit exploits an inherent weakness of the malware-centric intelligence ecosystem that dominates the security industry today. Furthermore, this malware was discovered solely because of DNS threat detection algorithms. Organizations best defense against these attacks is protection at the DNS level, within every network. Infoblox’s BloxOne® Threat Defense customers remain protected from Decoy Dog and these known malicious threat actors.

“We urge the industry to take this research forward, further investigate and share their findings,” added Harrell.

Hands-On, Real-Life Experience of Pupy at BlackHat: Dr. Renée Burton will be discussing why “Decoy Dog is No Ordinary Pupy” in detail, along with other key findings at Black Hat cybersecurity conference in Las Vegas on Wednesday, August 9 from 1:15 pm-1:35 pm PT. Throughout the conference, attendees will be able to meet with Infoblox researchers and demonstrate their skills with a series of hands-on challenges using a live Pupy controller via Infoblox’s Double Dog Dare experience. Additional short introductions to Decoy Dog and Pupy will be held at the booth theater both days. This unique experience will allow participants to see firsthand how the DNS traffic is used to relay communications between the client and server to better understand the serious threat this malware poses.

The Hidden Potential of DNS in Security: Decoy Dog and Pupy take advantage of the lack of DNS oversight that often occurs in networks. In fact, over 90% of all malware uses DNS in some way. Infoblox knows it’s imperative that security professionals understand the ways in which malware exploits DNS and how DNS Detection and Response can often thwart these attacks. Experts in the field recently released a new book titled “The Hidden Potential of DNS in Security.” This book gives readers everything they need to know about lookalike domains, domain generated algorithms (DGAs), DNS tunneling, data exfiltration over DNS, why hackers use DNS, and how to defend against these attacks.

Related Topics:
Continue Reading

News

The Maritime Standard Awards 2025 winners list showcases high levels of innovation and operational excellence across the maritime sector

Published

3 weeks ago

on

October 30, 2025

By


The maritime sector’s leading awards event, The Maritime Standard (TMS) Awards 2025, has announced this year’s winners, honoring outstanding companies and industry leaders from across the Middle East and Indian Subcontinent. The Awards showcased achievement and innovation in 25 categories covering shipping, logistics, ship repair, offshore services, marine technology and related sectors, as well as a series of special awards for individual achievement. The prestigious event took place at Atlantis The Palm, Dubai on October 29th, attracting over 1000 senior executives, decision-makers and industry leaders, from the region, and across the globe.

Held under the patronage of H.H. Sheikh Ahmed bin Saeed Al Maktoum, President of the Dubai Civil Aviation Authority, Chairman of Dubai Airports, and Chairman and Chief Executive of Emirates Airline and Group, the event recognised organisations and individuals for setting new standards in operational excellence and leadership in the sector amid significant shifts in the industry, including decarbonisation, digitalization, and a renewed emphasis on supply chain resilience. From clean-fuel projects and AI-powered port operations to international collaborations that boost trade efficiency, the 2025 Awards showcased the industry’s progress in turning goals into tangible outcomes.

The evening was hosted by Yalda Hakim, a renowned international correspondent and documentary filmmaker, whose engaging presence added distinction to the occasion. The keynote address was delivered by Captain Abdulkareem Al Masabi, CEO of ADNOC Logistics and Services, who shared valuable insights on the evolving maritime landscape and the UAE’s leadership in advancing sustainable and innovative practices across the sector.

Clive Woodbridge, Editor of The Maritime Standard and Chairman of the Judging Panel, stated, “This year’s competition was exceptionally tough, and we received an unprecedented number of entries across all categories. Each finalist demonstrated remarkable achievements and operational standards over the past year, which underlines the significant advances that continue to be made in the regional maritime sector.”

A rigorous assessment process was conducted as part of the award selections, and this was supervised by an independent panel of distinguished judges that included some of the most prominent names in the maritime industry.

Trevor Pereira, Managing Director of The Maritime Standard, commented, “These Awards are not just about celebrating success, but also about encouraging excellence. This year’s event recognised innovative concepts, exciting new initiatives, and outstanding performance standards. As the region continues to expand its maritime infrastructure and digital port systems, with significant developments across the Middle East and the Indian Subcontinent, events like The Maritime Standard Awards play a key role in reinforcing its position as a global leader in shipping and maritime.”

 Reaction from the individual winners on the night of October 29th was highly appreciative. Captain Mohamed Al Ali, Senior Vice President, Operations (Offshore Logistics), at ADNOC L&S, who received the Outstanding Achievement Award, added: “It was one of the greatest honours of my professional career to receive this Award. It really means a lot to me to have TMS recognise the years of dedication and hard work.”

Tony Dagher, the Founder and Managing Director of TMC Shipping Group was the recipient of the Young Person in Shipping and was similarly honoured. He said: “I have been fortunate to have had great support from many people during my journey in shipping, and to have a fantastic team around me now. This Award is as much for them as it is for me.

Over the past 12 years The Maritime Standard Awards has consolidated its standing as one of the most prominent annual gatherings within the global maritime calendar, gaining worldwide recognition for recognising excellence and promoting a more resilient and sustainable maritime future.

Continue Reading

News

Deep Dive Dubai Launches Sunken City Walk, a Cinematic Underwater Experience that Makes Adventure Just a Step Away

Published

2 months ago

on

September 11, 2025

By

Deep Dive Dubai

Deep Dive Dubai has unveiled its newest attraction for experience seekers with the launch of Sunken City Walk. The guided underwater activity invites guests to step into a cinematic cityscape filled with surreal details. From an underwater swing and motorbike to a café table that looks straight out of a movie scene, this is Dubai’s latest must-try attraction.

Deep Dive Dubai

The hour-long journey begins with a full briefing and safety overview, followed by guests changing into wetsuits and equipment provided on-site. They then join trained instructors for a 20-minute guided underwater walk through the Sunken City—an accessible, certification-free experience that requires no swimming skills, making it ideal for guests aged 10 and above. Currently offered at an introductory price of AED 600, with an optional 30-second keepsake video for AED 200, the experience is currently available in four daily slots at 11 AM, 12 PM, 2pm, and 3pm.

Jarrod Jablonski, Director, Deep Dive Dubai, said that “With Sunken City Walk, we’re continuing to shape Dubai’s reputation as a city of unforgettable experiences. It’s a unique attraction that reflects Dubai’s spirit, where visitors can discover adventure in ways they never thought possible.”

The launch reflects a global trend that travellers are choosing experiences over possessions. Supporting this, Shamal’s Experience Economy Report stated that 75% of UAE residents are more willing to spend on experiences, with 80% allocating a dedicated monthly budget. The launch also aligns with Dubai’s commitment to strengthening its global tourism appeal. According to Dubai Department of Economy and Tourism (DET), the city welcomed 9.88 million international visitors in the first half of 2025, a six percent increase year-on-year, reinforcing its position as one of the world’s leading lifestyle and tourism hubs. Sunken City Walk at Deep Dive Dubai adds a new way for visitors to experience the city’s spirit of reinvention, where adventure is always just a step away.

While Sunken City Walk offers a first taste of underwater adventure, guests can plunge into the incredible world of diving at Deep Dive Dubai, choosing from experiences such as scuba diving, freediving, and specialised diving courses.

Continue Reading

News

Free Mineral Water for All: UAE Startup to Launch Groundbreaking Public Hydration Initiative

Published

6 months ago

on

June 3, 2025

By

Ourwatr

Staying hydrated just got easier, and greener, thanks to Ourwatr, that’s launching a nationwide free mineral water programme starting June 2025. It’s a first in the region: clean, refreshing mineral water made freely available across the country, delivered through a unique model that blends sustainability, community care, and social impact.

From metro stations and shopping malls to parks and government offices, thousands of chilled bottles of mineral water, sourced locally from Dibba, Fujairah, will soon be within everyone’s reach, every day. Ourwatr’s mission is simple: hydration is a right, not a privilege.

“At Ourwatr, we believe that drinking water should be accessible to all,” says Abhinav Murali, Co-founder.

“That’s why we’re giving away premium mineral water for free, and every bottle supports communities in need. It’s hydration with heart, proudly made right here in the UAE.”

Stamp of UAE quality

All Ourwatr bottles carry the prestigious EQM (Emirates Quality Mark) certification, guaranteeing they meet strict UAE national and international quality standards. When you grab a bottle, you’re assured of top-quality water, safe, pure, refreshing and approved by the country’s standardisation authority.

Mission in a bottle

With temperatures rising across the UAE, especially during summer, access to clean drinking water is more important than ever, for workers, families, children, and the elderly alike.

“In our desert climate, hydration isn’t just healthy; it’s life-saving,” adds co-founder Bharath Mohan.
“Each bottle we provide is a small act of kindness toward our community.”

Ourwatr is more than just a startup, it’s a mission in a bottle. Launched by three young, UAE-based entrepreneurs, the idea was sparked by a simple but powerful observation: access to free, convenient hydration isn’t always a given.

Wanting to change that, the trio built a business with heart at its core. The team is also in talks with various UAE charitable organisations and government agencies to expand its reach and impact. For every bottle distributed, a portion will be donated to local charities, turning everyday hydration into a meaningful act of giving.

A Model Built on Purpose and Sustainability
Ourwatr isn’t just about water, it’s about doing good. Instead of selling to consumers, the company partners with brands and organisations who cover the production and distribution costs. In return, sponsors co-brand the bottles, using them as a platform to share positive messages and shared values, while making a real difference.

“Sustainability isn’t just about less waste,  it’s about creating lasting, meaningful change,” explains Sharat Nair, Co-founder.

The bottles are crafted from recyclable materials, aligning with the UAE’s zero-waste goals and green agenda.

Backing UAE Vision 2030
Ourwatr’s initiative supports the UAE’s Vision 2030 goals around health, sustainability, and quality of life. The startup is already collaborating with local authorities to expand water access and reach as many people as possible.

More than just water, Ourwatr is delivering hope, equality, and care, one bottle at a time.

Continue Reading

Trending

Copyright © 2023 | The Integrator