Crypto, investment & PonziReviewed
Noir wallet-drainer kit pivots through noir.black DNS TXT C2
Infoblox Threat Intel detailed Noir, a crypto wallet-drainer kit that looks up its current infrastructure through DNS TXT records at _r.noir.black and steals through wallet approvals rather than seed phrases.
- noir.black
- Also: render-984.pages.dev
Reported Oct 13, 20261 report