KOR Labs Cybersecurity
From Internet Data to Cyber Defense
We help the Internet community combat DNS abuse and other cyber threats
Collaboration
Our Valued Partners
Expertise
What We Do
We investigate malicious activities and share insights to empower the Internet community in combating cybercrime
Threat Intelligence
We continuously collect and process vast amounts of cyber threat data to identify ongoing and emerging attack trends.
DNS Abuse
We monitor malicious activities that exploit the Domain Name System (DNS), including phishing, spam, malware, and botnets.
Cybersecurity Research
We apply rigorous academic methods to analyze the collected data, therefore advancing the scientific knowledge in the field.
Insights
Latest News & Blogs
Day in the life of RIPE Atlas
RIPE Atlas is one of the most widely used Internet measurement platforms, trusted by researchers and operators alike. In this blog, we analyse what RIPE Atlas looked like on 1 November, 2025.
LogoTrust: a validated dataset of brands, domain names, and logos
In this blog, we explore how Brand Indicators for Message Identification (BIMI) can be used as a foundation for a high-integrity dataset that is suitable for security-related applications like phishing detection.
Bulletin: DNS Abuse Campaign Exploiting "Subdomain Cloaking"
As a follow up to our recent blog on the concentration of malicious phishing, we are publishing this blog to raise awareness of a recently observed (and ongoing) campaign which involves a specific type of malicious registration.
Discovering the Discovery of Designated Resolvers
DNS encryption is gaining momentum with proposed standards such as DoT, DoH, and DoQ protecting DNS exchanges from external observers. In this blog, we look at the Discovery of Designated Resolvers (DDR) - a mechanism that allows clients to obtain encryption configurations of recursive resolvers.
Recent Updates
Joining the 2026 Internet Society Pulse Research Fellowship
We are very excited to join the 2026 Internet Society Pulse Research Fellowship.The fellowship is …
New Research: Monitoring and Characterising Phishing on IPFS
The InterPlanetary File System (IPFS) enables resilient and distributed content delivery, but it can also …
Speaking at the FIRST Technical Colloquium in Paris, France
Join us at the FIRST Technical Colloquium in Paris, where Maciej Korczyński (Grenoble Alpes University …
Our team at the Internet Integrity Workshop II in Bucharest, Romania
Last year, we participated in the Internet Integrity Workshop II, colocated with RIPE 91 in …
New Research: Identifying URL Shortening Services
Our team has just published new research on identifying URL shortening services in the wild.URL …
Speaking at ACM CCS 2025 in Taipei, Taiwan
We are attending ACM CCS 2025 in Taipei, Taiwan, to present our paper on the …
Join us for the ICANN Webinar on Extended DNS Errors
Our team will be presenting a webinar on Extended DNS Errors (EDE) as part of …