WHOIS: identification or correlation?

Recently, WHOIS data was used to uncover a large cluster of domains used for a fake URL-shortener scheme and a massive SMS phishing operation, known as Prolific Puma. Spamhaus Technology’s Head of Data Carel Bitter explores why this case is particularly interesting and the role of WHOIS data in identification and correlation.

*** This is a Security Bloggers Network syndicated blog from The Spamhaus Project authored by Carel Bitter. Read the original post at: https://www.spamhaus.org/resource-hub/service-providers/whois-identification-or-correlation