KOR Labs Cybersecurity
From Internet Data to Cyber Defense
We help the Internet community combat DNS abuse and other cyber threats
Collaboration
Our Valued Partners
Expertise
What We Do
We investigate malicious activities and share insights to empower the Internet community in combating cybercrime
Threat Intelligence
We continuously collect and process vast amounts of cyber threat data to identify ongoing and emerging attack trends.
DNS Abuse
We monitor malicious activities that exploit the Domain Name System (DNS), including phishing, spam, malware, and botnets.
Cybersecurity Research
We apply rigorous academic methods to analyze the collected data, therefore advancing the scientific knowledge in the field.
Insights
Latest News & Blogs
ADoX deployment in the wild
In this blog, we examine the deployment of recursive-to-authoritative encryption (ADoX) in the wild, across both nameservers and resolvers.
Day in the life of RIPE Atlas
RIPE Atlas is one of the most widely used Internet measurement platforms, trusted by researchers and operators alike. In this blog, we analyse what RIPE Atlas looked like on 1 November, 2025.
LogoTrust: a validated dataset of brands, domain names, and logos
In this blog, we explore how Brand Indicators for Message Identification (BIMI) can be used as a foundation for a high-integrity dataset that is suitable for security-related applications like phishing detection.
Bulletin: DNS Abuse Campaign Exploiting "Subdomain Cloaking"
As a follow up to our recent blog on the concentration of malicious phishing, we are publishing this blog to raise awareness of a recently observed (and ongoing) campaign which involves a specific type of malicious registration.
Recent Updates
Speaking at OARC 46 in Edinburgh, Scotland
We were pleased to participate in the OARC 46 workshop and share our latest research …
Joining the 2026 Internet Society Pulse Research Fellowship
We are very excited to join the 2026 Internet Society Pulse Research Fellowship.The fellowship is …
New Research: Monitoring and Characterising Phishing on IPFS
The InterPlanetary File System (IPFS) enables resilient and distributed content delivery, but it can also …
Speaking at the FIRST Technical Colloquium in Paris, France
Join us at the FIRST Technical Colloquium in Paris, where Maciej Korczyński (Grenoble Alpes University …
Our team at the Internet Integrity Workshop II in Bucharest, Romania
Last year, we participated in the Internet Integrity Workshop II, colocated with RIPE 91 in …
New Research: Identifying URL Shortening Services
Our team has just published new research on identifying URL shortening services in the wild.URL …
Speaking at ACM CCS 2025 in Taipei, Taiwan
We are attending ACM CCS 2025 in Taipei, Taiwan, to present our paper on the …