⚠️ A threat actor is selling a "domain suspension service" and a methodology kit on a popular cyb...

Summary

A cybercriminal is advertising a "domain suspension service" and methodology kit on a dark web forum, offering to forcibly take down domains across multiple TLDs (.com, .net, .org, .io, .ai) by abusing registrar abuse-reporting mechanisms and legal takedown procedures. This represents a new extortion and sabotage vector targeting legitimate domain owners and services.

Indicators of Compromise

• malware — domain suspension service

Entities