We help the Internet community combat DNS abuse and other cyber threats
We investigate malicious activities and share insights to empower the Internet community in combating cybercrime
We continuously collect and process vast amounts of cyber threat data to identify ongoing and emerging attack trends.
We monitor malicious activities that exploit the Domain Name System (DNS), including phishing, spam, malware, and botnets.
We apply rigorous academic methods to analyze the collected data, therefore advancing the scientific knowledge in the field.
We are excited to announce our support for the 10th International Workshop on Traffic Measurements for Cybersecurity (WTMC 2025), set to take place in Venice, Italy, on June 30, 2025. The event, co-located with the IEEE European Symposium on Security and Privacy, will bring together experts from academia and industry to explore cutting-edge research in cybersecurity seen from the traffic measurements perspective.As a supporter, we are committed to advancing the field of cybersecurity and facilitating conversations on traffic measurements, network anomalies, and the role of emerging technologies like generative AI in both cyber defense and attacks. We look forward to engaging with the brightest minds in the industry and contributing to the development of innovative cybersecurity solutions.For more information about the event, visit WTMC 2025.
We are very happy to announce that Professor Maciej Korczyński will present the results of the INFERMAL project at ICANN 81 in Istanbul (Türkiye). Join the DNS Abuse Updates session on Wednesday November 13, 2024 13:15 - 14:30 GMT+03 to learn about different factors that may influence the choice of certain registrars and TLDs by malicious actors when registering new phishing domains.About the project: INFERMAL (Inferential Analysis of Maliciously Registered Domains) is a research study being carried out by KOR Labs and funded by ICANN. The goal of this project is to conduct an in-depth analysis of maliciously registered domain names, aiming to uncover cyber attackers' preferences and possible measures to mitigate abusive activities within the domain name space.Follow the updates on the project website.
Last year, KOR Labs together with partners (ORANGE Polska SA, PDMFC LDA, and NovaForensic) kicked off the ThreatChase project with the aim to create an open platform for protection against phishing.The proposed platform will improve cybersecurity capabilities across the EU, notably for SMEs and public organizations by providing the essential information needed to identify and block malicious traffic before it reaches their networks. It can help organizations to detect and respond to cyberattacks more quickly based on real-time threat intelligence, allowing them to identify when their systems are being targeted by attackers and take appropriate action.Follow us on X and LinkedIn to see how we make the ThreatChase platform a pivot place for supporting interaction between suppliers and adopters of cybersecurity solutions.