Experts Warn Hackers Spending Millions on Expired Domains for Malware Scams

Summary

Infoblox Threat Intel warns that hackers are spending millions on expired domains, with roughly 65,000 re-registered daily in the first half of 2026, to enable malware scams. One actor, dubbed Sable Squirrel, controls over 10,000 domains, spending an estimated $7 million, and uses a subset for malware command-and-control while also running a Vietnamese-language sports piracy operation.