Blockchain Press Releases
Decoy Dog is No Ordinary Pupy – Infoblox Reveals Shift in Malware Tactics After Initial Discovery
- Infoblox discovers that open-source software Pupy is a smokescreen for the real capabilities of Decoy Dog – highlighting the critical need for DNS security
- As result of initial Decoy Dog publication, threat actors took action to maintain access to already compromised devices
- Infoblox continues to monitor the situation, reverse engineers the threat, and builds sophisticated DNS detection algorithms to mitigate additional hidden threats
- Infoblox’s Head of Threat Intelligence, Dr. Renée Burton, presents exclusive insights on why Decoy Dog is No Ordinary Pupy at Black Hat in Las Vegas on August 9
SANTA CLARA, Calif., July 25, 2023 /PRNewswire/ — Infoblox Inc., the company that delivers a simplified, cloud- enabled networking and security platform for improved performance and protection, today published a second threat report with critical updates on “Decoy Dog,” the remote access trojan (RAT) toolkit they discovered and disclosed in April 2023. The malware uses DNS to establish command and control (C2) and is suspected as a secret tool used in ongoing nation-state cyber attacks.
The threat actors swiftly responded following Infoblox’s disclosure of the toolkit, adapting their systems to ensure continued operations, indicating that maintaining access to victim devices remains a high priority. The analysis shows that the use of the malware has spread, with at least three actors now operating it. Although based on the open-source RAT Pupy, Decoy Dog is a fundamentally new, previously unknown, malware with many features to persist on a compromised device. Many aspects of Decoy Dog remain a mystery, but all signs point to nation-state hackers. Infoblox released a new data set containing DNS traffic captured from Infoblox’s servers to support further industry investigation of the C2 systems.
The question many in the industry continue to silently ask is: Are we really securing our network if we’re not monitoring our DNS? There is a significant risk that Decoy Dog and its use will continue to grow and impact organizations globally. Currently, the only known means to detect and defend against Decoy Dog/Pupy today is with DNS Detection and Response systems like Infoblox’s BloxOne® Threat Defense.
“It’s intuitive that DNS should be the first line of defense for organizations to detect and mitigate threats like Decoy Dog. Infoblox is the industry’s best-of-breed DNS Detection and Response solution, providing companies with a turn-key defense that other XDR solutions would miss,” said Scott Harrell, Infoblox President and CEO. “As demonstrated with Decoy Dog, studying and deeply understanding the attacker’s tactics and techniques allows us to block threats before they are even known as malware.”
Through large-scale DNS analysis, Infoblox has learned key features of the malware and the actors who operate it. Directly following the first announcement on social media, every Decoy Dog threat actor responded to Infoblox’s disclosures in different ways. Some of the name servers mentioned in Infoblox’s April 2023 report were taken down, while others migrated their victims to new servers. Despite their efforts to hide, Infoblox has continued to track the activities and has since learned a great deal more about them. Infoblox has been able to infer the nature of some communications, and estimates that the number of compromised devices is relatively small. Infoblox has also been able to distinguish Decoy Dog from Pupy and determine that Decoy Dog has a full suite of powerful, previously unknown capabilities, including the ability to move victims to another controller, allowing them to maintain communication with compromised machines and remain hidden for long periods of time. Some victims have actively communicated with a Decoy Dog server for over a year.
“The lack of insight into underlying victim systems and vulnerabilities being exploited makes Decoy Dog an ongoing and serious threat,” said Dr. Renée Burton, Head of Threat Intelligence at Infoblox. “The best defense against this malware is DNS. Malicious activity often goes unnoticed because DNS is undervalued as a critical component in the security ecosystem. Only enterprises with a strong protective DNS strategy can protect themselves from these types of hidden threats.”
In total, Infoblox is currently monitoring 20 Decoy Dog domains, some of which were registered and deployed within the last month. This toolkit exploits an inherent weakness of the malware-centric intelligence ecosystem that dominates the security industry today. Furthermore, this malware was discovered solely because of DNS threat detection algorithms. Organizations best defense against these attacks is protection at the DNS level, within every network. Infoblox’s BloxOne® Threat Defense customers remain protected from Decoy Dog and these known malicious threat actors.
“We urge the industry to take this research forward, further investigate and share their findings,” added Harrell.
Hands-On, Real-Life Experience of Pupy at Black Hat: Dr. Renée Burton will be discussing why “Decoy Dog is No Ordinary Pupy” in detail, along with other key findings at Black Hat cybersecurity conference in Las Vegas on Wednesday, August 9 from 1:15 pm-1:35 pm PT. Throughout the conference, attendees will be able to meet with Infoblox researchers and demonstrate their skills with a series of hands-on challenges using a live Pupy controller via Infoblox’s Double Dog Dare experience. Additional short introductions to Decoy Dog and Pupy will be held at the booth theater both days. This unique experience will allow participants to see firsthand how the DNS traffic is used to relay communications between the client and server to better understand the serious threat this malware poses.
The Hidden Potential of DNS in Security: Decoy Dog and Pupy take advantage of the lack of DNS oversight that often occurs in networks. In fact, over 90%* of all malware uses DNS in some way. Infoblox knows it’s imperative that security professionals understand the ways in which malware exploits DNS and how DNS Detection and Response can often thwart these attacks. Experts in the field recently released a new book titled “The Hidden Potential of DNS in Security.” This book gives readers everything they need to know about lookalike domains, domain generated algorithms (DGAs), DNS tunneling, data exfiltration over DNS, why hackers use DNS, and how to defend against these attacks. A copy of the book is available at Amazon.
Visit Infoblox at Black Hat in Las Vegas at Booth #1286 on August 9-10 to meet the team of experts to learn more about Decoy Dog/Pupy.
*More than 90% of malware attacks leverage DNS to establish command and control on a targeted network, according to Anne Neuberger, Director of Cybersecurity at National Security Agency.
About Infoblox
Infoblox unites networking and security to deliver unmatched performance and protection. Trusted by Fortune 100 companies and emerging innovators, we provide real-time visibility and control over who and what connects to your network, so your organization runs faster and stops threats earlier. Visit infoblox.com, or follow-us on LinkedIn or Twitter.
About Infoblox’s Threat Intelligence Group
The Threat Intelligence Group at Infoblox is dedicated to creating high fidelity “block-and-forget” domain name service (DNS) intelligence data for use in BloxOne Threat Defense. Core to Infoblox’s protection strategy is the identification of suspicious domains. Infoblox’s Threat Intelligence Group uses a patented machine learning algorithm to minimize the risk of enterprise outages while enabling maximum coverage of threats. Infoblox identifies suspicious domains through several custom-built algorithms and DNS based threat hunting.
Media Contacts
Ashley Kusowski
Head of Corporate Communications
[email protected]
Hannah Mautz
Account Supervisor
[email protected]
Photo – https://mma.prnewswire.com/media/2160687/Infoblox_Decoy_Dog_Report.jpg Logo – https://mma.prnewswire.com/media/2057499/4178195/Infoblox_NEW_Logo.jpg
View original content:https://www.prnewswire.co.uk/news-releases/decoy-dog-is-no-ordinary-pupy–infoblox-reveals-shift-in-malware-tactics-after-initial-discovery-301884555.html
Blockchain
Blocks & Headlines: Today in Blockchain – May 12, 2025 | Rootstock, Zimbabwe Carbon Registry, Fastex, 21Shares, The Blockchain Group
Welcome to Blocks & Headlines, your daily op-ed style deep dive into the most pivotal blockchain and crypto stories shaping today’s market. In this edition—May 12, 2025—we cover:
-
Bitcoin DeFi Security Strengthens as Rootstock garners 81% of Bitcoin’s hashrate
-
Zimbabwe’s Blockchain Carbon Credit Registry aims to restore investor trust
-
Token2049 Dubai Highlights spotlight Fastex’s Web3 innovations
-
21Shares’ New ETP for Cronos (CRO) bridges traditional finance and DeFi
-
The Blockchain Group’s €9.9 M Capital Raise fuels its Bitcoin treasury strategy
Below, each story is summarized with key takeaways and opinion-driven context.
Introduction
Today’s blockchain landscape is defined by two contrasting forces: institutional maturation—as legacy players and governments adopt tokenized assets and infrastructure—and startup-driven innovation—where Web3 pioneers push boundaries in DeFi, NFTs, and on-chain governance. Major trends include:
-
Security & Scalability: Layer-2 solutions and cross-chain bridges are gaining traction to secure and scale Bitcoin and Ethereum ecosystems.
-
Transparency & Trust: From carbon credits to capital markets, blockchain is repeatedly chosen to enhance auditability and investor confidence.
-
Mainstream Access: Crypto ETPs and regulated token offerings are lowering barriers for retail and institutional investors.
-
Treasury Management: Public companies are increasingly using Bitcoin and token holdings as strategic assets to hedge against macro volatility.
Let’s unpack today’s five developments and their broader implications.
1. Bitcoin DeFi Security Strengthens with Rootstock’s Hashrate Share
What happened: A new Messari report finds that Rootstock (RSK), Bitcoin’s oldest layer-2 smart-contract platform, now commands 81% of Bitcoin’s total hashrate, up from 56% before major mining pools Foundry and SpiderPool onboarded in February. Transactions on Rootstock are 95% cheaper than on-chain Bitcoin and 55% cheaper than Ethereum, positioning RSK for sustained DeFi growth in 2025.
Source: CoinDesk
Analysis & commentary:
Rootstock’s dominant hashrate share underscores two key shifts:
-
Security by Convergence: By leveraging Bitcoin’s massive mining network, RSK mitigates the common 51% risk faced by smaller chains.
-
Cost-Efficiency for DeFi: Lower fees make RSK an attractive alternative to Ethereum for yield protocols, lending markets, and decentralized exchanges.
However, challenges remain. Smart-contract developers must integrate robust cross-chain bridges—Rootstock’s partnership with LayerZero is a start—to attract liquidity. Moreover, regulatory scrutiny of DeFi is rising; RSK’s governance will need transparent on-chain dispute resolution and compliance tooling to win institutional adoption.
2. Zimbabwe’s Blockchain Carbon Credit Registry to Revive Investor Confidence
What happened: In Harare on May 9, the Zimbabwean government launched the world’s first blockchain-enabled carbon credit registry, developed by Dubai’s A6 Labs. The immutable ledger will record issuance, trading, and retirement of credits, addressing the fallout from 2023’s abrupt project cancellations and a 50% revenue levy that spooked developers. The new Zimbabwe Carbon Markets Authority (ZCMA) will oversee licensing via the zicma.org.zw portal.
Source: Bloomberg
Analysis & commentary:
Zimbabwe’s registry is an instructive case study in how blockchain can restore transparency and rebuild market trust:
-
Immutable Audits: Every credit’s provenance is verifiable on-chain, deterring double-counting and fraud.
-
Regulatory Framework: A dedicated authority streamlines approvals, balancing market access with environmental integrity.
-
Investor Reassurance: By codifying rules in smart contracts, Zimbabwe signals that future policy shifts will be governed by code, not sudden ministerial edict.
Nonetheless, blockchain is not a panacea. Effective enforcement still depends on reliable on-the-ground measurement and reporting. The real test will be whether smaller African producers—Kenya, Zambia—adopt interoperable registries, creating a pan-continental carbon marketplace.
3. Web3 Innovation Takes Center Stage at Token2049 Dubai
What happened: Between April 30 and May 1, Token2049 Dubai convened industry leaders in the Emirates. Fastex, a platinum sponsor, showcased its Bahamut blockchain (PoSA consensus), the YoWallet custodial solution, and a wave of new apps—YoHealth, YoPhone/YoSIM, YoBlog—all designed to expand Web3 use cases beyond finance. Fastex also co-hosted regulatory forums with Solidus Labs and launched the Bahamut Grants program to seed developer innovation.
Source: Cointelegraph
Analysis & commentary:
Token2049’s Dubai edition highlights an ecosystem maturation where:
-
Compliance & Growth Coexist: Legal breakfasts signaled that self-regulation and layered oversight can lower entry barriers without stifling ingenuity.
-
Beyond Finance: By unveiling telecom and health apps, Fastex challenges the notion that blockchain is niche—real-world use cases can drive mainstream adoption.
-
Brand Ambassadors: Football legend Patrice Evra’s presence at YoHealth’s booth illustrates how cultural icons can amplify blockchain’s reach.
Moving forward, projects must demonstrate measurable end-user utility and scalable infrastructure to avoid the “pilot-only” trap. Dubai’s supportive regulatory sandbox remains an ideal proving ground.
4. 21Shares Launches ETP for Cronos (CRO) – Bridging TradFi and DeFi
What happened: Swiss issuer 21Shares listed a new ETP (CRON) on May 12, offering direct exposure to CRO, the native token of Cronos—a Layer 1 chain built for DeFi, NFTs, and cross-chain interoperability with Ethereum and Cosmos. Investors can now trade CRO through regular brokerages without managing private keys or wallets.
Source: The Paypers
Analysis & commentary:
Tokenizing blockchain assets into regulated ETPs remains one of the most powerful drivers of institutional capital inflows:
-
Familiar Interfaces: By packaging CRO as a ticker, 21Shares lowers the learning curve for asset managers and pension funds.
-
Regulatory Alignment: ETPs fall under securities law, offering clear governance compared to unregulated spot tokens.
-
Ecosystem Growth: Cronos stands to benefit from increased liquidity and brand recognition, which in turn fuels DeFi activity on its network.
ETPs also invite scrutiny: fees, redemption mechanics, and underlying custodial risks must be transparent to preserve investor trust. As competition heats up—with products for BTC, ETH, SOL, and more—issuers will vie on pricing, ease of access, and institutional credibility.
5. The Blockchain Group’s €9.9 M Capital Raise Advances Bitcoin Treasury Strategy
What happened: Europe’s first Bitcoin Treasury Company, The Blockchain Group (ALTBG), completed a €9.888 million capital increase at €1.0932 per share on May 7, 2025. Proceeds will bolster its strategy to accumulate Bitcoin per fully diluted share while expanding consulting and AI-driven blockchain services.
Source: ActusNews via MarketScreener
Analysis & commentary:
The Blockchain Group’s financing round underscores a new corporate paradigm where holding BTC is core to the business model:
-
Shareholder Alignment: By tethering equity value to Bitcoin accumulation, management and investors share upside in crypto markets.
-
Operational Synergies: Subsidiaries in data intelligence and decentralized consulting can monetize both service fees and on-balance-sheet Bitcoin appreciation.
-
Regulatory Compliance: As a publicly listed entity on Euronext Growth Paris, ALTBG navigates EU financial rules, offering a transparent vehicle for crypto exposure.
Yet this approach carries volatility risk: sudden BTC price swings can compress earnings per share and spur shareholder activism. Mitigation strategies—such as hedged derivatives and staggered BTC purchases—will be critical to sustain growth without alarming investors.
Conclusion
Today’s highlights reveal a blockchain industry at once foundational and frontier:
-
Security & Scale: Rootstock’s hashrate gains fortify Bitcoin DeFi’s underpinnings.
-
Transparent Markets: Zimbabwe’s carbon registry sets a template for blockchain-backed commodity markets.
-
Web3 Diversification: Token2049 Dubai shows that true mass adoption demands real-world applications in health, telecom, and beyond.
-
Institutional Access: ETPs like CRON democratize token ownership for mainstream investors.
-
On-Balance-Sheet Crypto: The Blockchain Group exemplifies the rising class of publicly traded crypto-native firms.
As blockchain extends into supply chains, tokenized securities, and identity, the winners will be those who blend innovative protocol design with pragmatic regulatory alignment. Keep tuning into Blocks & Headlines for tomorrow’s top stories.
The post Blocks & Headlines: Today in Blockchain – May 12, 2025 | Rootstock, Zimbabwe Carbon Registry, Fastex, 21Shares, The Blockchain Group appeared first on News, Events, Advertising Options.
Once live, the Input | Output (IO) led integration will bring full Cardano support to Brave Wallet, including Cardano native assets, as well as send, receive, swap, and signing capabilities- all natively embedded within Brave’s best-in-class browser wallet. This establishes Brave as a key partner to the Cardano community in the age of Voltaire.
SAN FRANCISCO and LONDON, May 12, 2025 /PRNewswire/ — Input | Output (IO), the preeminent Web3 blockchain infrastructure and engineering firm, today announced a strategic partnership with Brave Software, the creator of the leading privacy-first browser and integrated multi-chain Brave Wallet. Together, they will integrate Cardano into the Brave Wallet, enabling Cardano blockchain access and token management from within the Brave wallet.
“Our partnership with IO reflects Brave’s commitment to building a Web3 that maximizes interoperation for user choice, while giving them better tools to engage with decentralized ecosystems,” said Brendan Eich, CEO and co-founder of Brave and the Basic Attention Token (BAT). “Integrating Cardano into Brave Wallet not only expands multi-chain access, but also enhances security, governance participation, and the overall user experience.”
Through this integration, Brave users and the broader Cardano community will gain direct access to Cardano’s blockchain for activities such as governance participation and native asset management, all within the privacy-focused Brave Wallet. Additionally, Brave Wallet will support the execution of swaps with Cardano native tokens and other on-chain transactions. This major milestone enhances Brave’s multi-chain capabilities, adding to its existing support for networks like Ethereum and Solana. Cardano users will now be able to manage native assets like NIGHT, engage in governance, and seamlessly swap tokens—securely and privately—through Brave’s in-browser wallet.
“This collaboration with Brave is a natural fit,” said Charles Hoskinson, CEO of IO. “We share a vision for a more secure, accessible, and user-respecting Web3. By bringing Cardano into Brave Wallet, we are not only expanding functionality for Cardano users in the age of on-chain governance, but also advancing a new standard for how blockchain networks should empower individuals—protecting privacy while enabling active, on-chain participation.”
The partnership also sets the stage for future innovation around engagement with Cardano’s governance and Midnight, a blockchain developed by Shielded Technologies, an Input | Output spinout focused on confidential smart contracts and data protection.
Media Contacts:
Georgia Hanias
Input | Output (IO)
[email protected]
Catherine Corre
Brave Software
[email protected]
About Input | Output (IO)
Input |Output (IO) is a world-leading blockchain infrastructure and research engineering firm dedicated to building a sustainable Web3 ecosystem. IO is committed to advancing the next generation of blockchain innovation, focusing on scalability, security, and real-world adoption through pioneering research and cutting-edge engineering.
About Brave Wallet and Brave
Brave Wallet is the secure, multi-chain crypto wallet built directly into the Brave privacy browser—no extensions required. With Brave Wallet, users can manage tokens and NFTs; connect to DApps and onramp to Web3; and explore decentralized finance, social media, gaming, and more. Brave Wallet users can connect other “cold” wallets like Ledger & Trezor. They can buy, store, send, and connect to DApps on Solana, Ethereum and EVM chains, Zcash, and Filecoin.
Brave Wallet is available on desktop, Android, and iOS, and is free to use. To get started on desktop, Brave browser users can click the wallet icon near the address bar. On mobile, users can tap “⋮” (Android) or “…” (iOS), then tap the wallet icon.
Brave is a driving force leading the way for Web3 adoption, directly supporting Web3 into the broader Web through its privacy browser, independent search engine, and browser-native, multi-chain crypto wallet. Brave currently has over 85 million monthly active users. Learn more at brave.com.
Photo – https://mma.prnewswire.com/media/2683708/Charles_Hoskinson_Profile.jpg
Logo – https://mma.prnewswire.com/media/2683709/IO_Logo.jpg
View original content:https://www.prnewswire.co.uk/news-releases/input–output-partners-with-brave-to-integrate-cardano-into-brave-wallet-302451409.html
Blockchain Press Releases
Bybit Introduces BOB to P2P: Bolivian Traders Can Now Buy, Sell in Local Currency and Earn Commissions
DUBAI, UAE, May 12, 2025 /PRNewswire/ — Bybit, the world’s second-largest cryptocurrency exchange by trading volume, has expanded its peer-to-peer (P2P) platform to support the Bolivian Bolíviano (BOB), enabling users in Bolivia to buy and sell crypto with their national currency for the first time on the platform.
In addition to enhancing local access to digital assets, Bybit is launching a new merchant program that invites users to list BOB trading ads and earn generous bi-weekly commissions. High-performing merchants can earn up to 400 USDT every two weeks, with added incentives for those listing in multiple fiat currencies.
“Expanding our P2P platform to include BOB is a reflection of our dedication to financial inclusion and local empowerment,” said Mazurka Zeng, Head of Fiat at Bybit. “We’re proud to offer Bolivian users more ways to access crypto markets while also opening the door to new opportunities”.
Bybit P2P merchants receive tailored support, including 1-to-1 customer service and faster appeal resolutions. To qualify for rewards, merchants must maintain active listings for a specified number of hours each week and meet trading volume and order count targets. Performance is reviewed every two weeks, and rewards are distributed through the Rewards Hub.
This launch represents another step in Bybit’s ongoing commitment to bring crypto access and earning potential to communities around the world through localized, user-friendly P2P services.
Bybit is actively expanding in the LATAM market and has seen a consistent rise in user requests from Bolivia to support the Boliviano (BOB) on its P2P platform. As crypto adoption continues to grow across the region, adding BOB would enhance accessibility for local users and empower them to engage more easily with the digital asset economy.
#Bybit / #TheCryptoArk
About Bybit
Bybit is the world’s second-largest cryptocurrency exchange by trading volume, serving a global community of over 70 million users. Founded in 2018, Bybit is redefining openness in the decentralized world by creating a simpler, open and equal ecosystem for everyone. With a strong focus on Web3, Bybit partners strategically with leading blockchain protocols to provide robust infrastructure and drive on-chain innovation. Renowned for its secure custody, diverse marketplaces, intuitive user experience, and advanced blockchain tools, Bybit bridges the gap between TradFi and DeFi, empowering builders, creators, and enthusiasts to unlock the full potential of Web3. Discover the future of decentralized finance at Bybit.com.
For more details about Bybit, please visit Bybit Press
For media inquiries, please contact: [email protected]
For updates, please follow: Bybit’s Communities and Social Media
Discord | Facebook | Instagram | LinkedIn | Reddit | Telegram | TikTok | X | Youtube
Photo – https://mma.prnewswire.com/media/2684795/Bybit_Brings_BOB_P2P___Bolivian_Traders_Can_Now_Buy.jpg
Logo – https://mma.prnewswire.com/media/2267288/Logo.jpg
View original content:https://www.prnewswire.co.uk/news-releases/bybit-introduces-bob-to-p2p-bolivian-traders-can-now-buy-sell-in-local-currency-and-earn-commissions-302452489.html
-
Blockchain Press Releases6 days agoHTX Premieres USD1 Stablecoin Globally, Partnering with World Liberty Financial to Forge a New Era of Decentralized Economy
-
Blockchain5 days ago
Colb Asset SA Raises $7.3 Million in Oversubscribed Round to Bring Pre-IPO Giants to Blockchain
-
Blockchain Press Releases4 days agoHTX and Justin Sun Launch $6M Mars Program Special Edition, Offering One User a Historic Space Journey
-
Blockchain4 days agoBitget Blockchain4Youth sostiene l’innovazione del Web3 e dell’IA all’hackathon “Build with AI” di Google Developer Group
-
Blockchain4 days ago
Blocks & Headlines: Today in Blockchain – May 9, 2025 | Robinhood, Solana, Tether, China, Women in Web3
-
Blockchain5 days ago
Blocks & Headlines: Today in Blockchain – May 7, 2025 | Coinbase, Riot Games, Curve DAO, Litecoin, AR.IO
-
Blockchain Press Releases3 days agoBybit Surpasses 70 Million Users, Reinforces Commitment to Transparency and Institutional Growth
-
Blockchain Press Releases6 days agoJuCoin made a global impact at TOKEN2049 Dubai, advancing its ecosystem with the “Peak Experience” vision and JuChain’s robust tech.
