KOR Labs

From Internet Data to Cyber Defense

Learn more

What we do

KOR Labs is an exceptional place where top research methods and tools meet industry needs for a safer Internet. Our team comprises security researchers with world-class expertise in Internet technologies and DNS abuse. We are passionate about investigating malicious activities and sharing knowledge with the technical and policy communities to prevent cybercrime.

ThreatChase

Detect and respond to phishing attacks more quickly and efficiently with our new open platform.

Cyber Threat Intelligence

The French cyber threat intelligence platform aimed at sharing knowledge among multiple players.

NetBeacon MAP

Consult monthly reports on the use of the Domain Name System in phishing and malware activities.

INFERMAL

Uncover cyber attackers' preferences and possible measures to mitigate abusive activities in DNS.

Latest news

INFERMAL project will be presented at ICANN 81

Nov 10, 2024

We are very happy to announce that Professor Maciej Korczyński will present the results of the INFERMAL project at ICANN 81 ...

Follow the updates on our EU-funded ThreatChase Project

Oct 22, 2024

Last year, KOR Labs together with partners (ORANGE Polska SA, PDMFC LDA, and NovaForensic) kicked off the ThreatChase project ...

We are hiring a Systems and Network Administrator

Mar 29, 2024

We are seeking a skilled Systems and Network Administrator who will configure, monitor, and maintain our system infrastructure.

See all the news

Blog

INFERMAL Project: Analyzing Features of Malicious Domain Registrations

Oct 24, 2024 · Yevheniya Nosyk, Maciej Korczyński, Carlos Gañán, Sourena Maroofi, Jan Bayer, Zul Odgerel, Samaneh Tajalizadehkhoob, Andrzej Duda

INFERMAL Project, funded by ICANN and conducted by KOR Labs, is dedicated to understanding the selection patterns behind cybercriminals' preferences for specific domain name registrars and top-level domains (TLDs) in their phishing operations. Our goal is to dissect the factors that make certain registrars and TLDs particularly attractive to attackers.

Building a Resilient Domain Whitelist to Enhance Phishing Blocklist Accuracy

Sep 8, 2024 · Jan Bayer, Sourena Maroofi, Andrzej Duda, Yevheniya Nosyk, and Maciej Korczyński

Community-driven and automated methods for constructing phishing blocklists may occasionally result in false positives, erroneously flagging benign domains or URLs as malicious. This blog discusses how we address this problem.

The D(M)ARC Side of the Email Reporting System

Aug 15, 2024 · Olivier Hureau, Jan Bayer, Andrzej Duda, and Maciej Korczyński

This blog post presents a large-scale study of DMARC to observe the user habits and preferences, consider the evolution of DMARC adoption in time, and understand how popular domains use DMARC.

See all our blog posts