Cyber Risks · Krebs on Security

Meet Ika & Sal: The Bulletproof Hosting Duo from Hell

Summary: Krebs on Security reports that Andrey Skvortsov, known online as "Icamis" or "Ika," was the second administrator of the invite-only Spamdot forum alongside Alexander Valerievich Grichishkin ("Salomon"), and that the two ran a bulletproof hosting and domain service for botmasters from January 2005 to April 2013. Grichishkin was arrested in 2020, pleaded guilty to conspiracy charges, and is serving a 60-month sentence in a federal prison in Michigan, while Skvortsov was sentenced to time served and his whereabouts are unknown.

Why it matters: The hosting empire these two ran supported the JabberZeus Crew and a Zeus variant built to defeat one-time authentication codes, and Grichishkin's Spamdot password alone tied him to the identity that led to his arrest - the infrastructure and the reused credentials both outlived the forum by years.

Read the original at Krebs on Security ↗

Topics
Malware
Related