Cyber Risks · Cisco Talos

Adventures in Domain Takedowns

Summary: Cisco Talos researcher presented "Adventures in Domain Takedowns" at the APCERT 2012 conference in Bali, describing lessons from preparing the talk. He reported getting help from contacts in China and Russia while many places in the US and Europe ignored him, found 9 registrars whose abuse@ email addresses bounced, and said WHOIS is unreliable for registrar information.

Key Takeaway: Nine registrars with dead abuse contacts and silence from US and European parties show that takedown success depends on personal contacts rather than geography or formal channels, which is why the researcher urges reaching out to national CERTs.

Read the original at Cisco Talos ↗

Topics
Malware
Related