2026-09-23 (WEDNESDAY): New Com-Affiliated Subdomains Target Wide Array of Industries

AUTHOR:

- Matt Brady

NOTES:

 - Unit 42 recently identified two domains (add-mfa[.]com and myaccountapps[.]com) that are likely associated with Com-affiliated threat actors based on known fingerprints.
- Based on our analysis of all subdomains observed by date of publication of this report, we identified more than 30 organizations operating in the following industries that could be targeted by vishing attempts based on previously observed activity by these threat actors:
  – Construction
  – Federal Government
  – Financial Services
  – High Technology
  – Insurance
  – Manufacturing
  – Media & Entertainment
  – Mining
  – Pharma & Life Sciences
  – Professional & Legal Services
  – Transportation & Logistics

INDICATORS:

FQDN - FIRST DATE OBSERVED:
- add-mfa[.]com - 9/14/26
- myaccountapps[.]com - 9/18/26