Silent Push 6.2 adds team-based module permissions and per-user API limits, and brings its IOFA and Traffic Origin intelligence checks to ThreatConnect, Microsoft Sentinel, and Palo Alto Cortex XSOAR.
A fintech security engineer replaced separate DNS, WHOIS, and web-scan integrations with one API to support an internal infrastructure risk graph and reduce manual data correlation.
Silent Push says a fast-flux service query exposed thousands of live phishing domains, including a Canada-focused banking campaign using cloaking and rotating DNS infrastructure. Researchers detail credential theft, callback lures, and detection approaches.
Silent Push investigated a Discord job ad seeking Western and Latin American proxies for remote tech interviews and payments, assessing the recruiter with high confidence as a North Korean IT worker based on technical, financial, and infrastructure indicators.
Silent Push 6.1 adds scheduled detection of look-alike domains, investigation and search updates, integrations for security workflows and AI agents, and bidirectional STIX/TAXII intelligence exchange.
Silent Push says its detection engine monitors for infrastructure impersonating an organization’s registered domains, IP ranges, ASNs, and TLDs, then scores and clusters candidates to help teams investigate and prepare takedowns.
Silent Push describes integrations that deliver infrastructure reputation and enrichment to Google SecOps, add IOFA context to Abstract Security data pipelines, and provide STIX-formatted threat intelligence to OpenCTI.
Silent Push researchers confirmed Astroproxy resells Peer2Profit bandwidth and found its proxy network could reach internal resources when a DNS name resolved to an internal IP, despite a filter blocking direct internal-IP requests.
Silent Push describes using its infrastructure intelligence and MCP server to provide AI-assisted SOC workflows with earlier context on adversary staging infrastructure, alongside integrations with existing SIEM and SOAR tools.