IPFS Gateways
Observable Types: domain
Description
The IPFS (InterPlanetary FileSystem) network is often used to host malware payloads and phishing kits.
Blocking access to IPFS service and gateway domains neutralizes multiple phishing attacks and prevents malware delivery.
Techniques
References
- https://blog.talosintelligence.com/ipfs-abuse/
- https://www.bleepingcomputer.com/news/security/phishing-attacks-distributed-through-cloudflares-ipfs-gateway/
- https://arxiv.org/abs/1905.11880