Forest Global Training Partners

Cyber Risks · Krebs on Security

Feds Request DNSChanger Deadline Extension

Summary: The U.S. Justice Department, the U.S. Attorney for the Southern District of New York and NASA filed a Feb. 17 request with the Southern District of New York to extend the March 8 shutdown of surrogate DNSChanger control servers to July 9, 2012, after security firm Internet Identity reported more than 3 million systems worldwide, including 500,000 in the United States, remain infected. Six Estonian men accused of running the botnet, including alleged ringleader Vladimir Tsastsin, are expected to be extradited to face computer intrusion and conspiracy charges, and are alleged to have made at least $14 million selling hijacked search traffic and swapped ads.

What's compelling: At least one DNSChanger infection was still running on computers at 50 percent of Fortune 500 firms and half of U.S. government agencies, so the deadline decision turns on whether those organizations can find and clean machines that the malware was built to hide.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related