Forest Global Training Partners

Cyber Risks · Krebs on Security

Microsoft Darkens 4MM Sites in Malware Fight

Summary: Microsoft obtained a Nevada court order on June 26 granting it temporary control over 23 no-ip.com domains, aiming to filter traffic to more than 18,400 hostnames tied to the njrat and njw0rm remote-access Trojans, which Microsoft said were responsible for over 7.4 million Windows PC infections. No-ip.com marketing manager Natalie Goguen said roughly four million hostnames went offline while the company could find only a little more than 2,000 of Microsoft's list still active, and that the first contact from Microsoft came on June 30 when its CEO was served the court order at his home.

Key Takeaway: To reach roughly 2,000 active malicious hostnames, Microsoft's seizure took down four million hostnames, and CrowdStrike co-founder Dmitri Alperovitch said no-ip.com is not a bulletproof host and has been responsive to researchers and law enforcement - the collateral scale is the stake a security leader should weigh against the takedown's benefit.

Read the original at Krebs on Security ↗

Topics
Malware
Related