Cyber Risks · Krebs on Security

Sipping from the Coronavirus Domain Firehose

Summary: Security experts tracking thousands of new Coronavirus-themed domain names registered each day found registrations closely tracked the spread of the virus, with the Cyber Threat Coalition reporting the rise began in late February around when the CDC warned a pandemic was likely. CTC spokesman Nick Espinosa said visits to tracked sites went from about 4,000 on February 25 to between 75,000 and 130,000 per weekday from March 23 onward, with about 40,000 on weekends.

What's compelling: DomainTools data scientist John Conwell noted legitimate organizations creating COVID-19 domains were several weeks behind threat actors, a pattern he said DomainTools had not seen in other crises - and CAUCE's Neil Schwartzman argued ICANN's letter urging registrars to act was 'weak tea' that would leave it bearing 'significant responsibility for any deaths' from the resulting fraud.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related