Forest Global Training Partners

Cyber Risks · Krebs on Security

Malware Dragnet Snags Millions of Infected PCs

Summary: Microsoft obtained a U.S. court order granting it temporary control over roughly 70,000 subdomains at the Chinese dynamic DNS provider 3322.org, which its investigators tied to the "Nitol" malware pre-loaded on PCs sold in Chinese computer stores and to hundreds of other malware strains. Within hours of the takeover, Microsoft said it saw more than 35 million unique IP addresses attempting to connect to those 70,000 subdomains, out of 2.75 million total subdomains hosted at 3322.org.

What you should know: Microsoft's Richard Boscovich said the company identified up to 560 malware strains tracing back to 3322.org, and OpenDNS's Dan Hubbard noted that sensitive data - from credit card details to proprietary company records - would flow through the sinkholed domains, raising the question of what Microsoft does with it and whether affected companies are told.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related