Cyber Risks · Krebs on Security

Still Spamming After All These Years

Summary: A hosting firm in Ireland disputed its SpamCop blacklisting with Cisco, then found the spam came from its Internet addresses that had been hijacked by a spam gang rather than hosted on its network. The trail led to domains registered to a Mike Prescott in San Diego and an email address tied to Michael Persaud, a bulk emailer previously sued by AOL in 1998 and criminally charged by the San Diego District Attorney's office in 2001, who admitted registering the domains and sending unsolicited bulk email but denied knowing the address ranges were hijacked.

What you should know: Dormant, unannounced address ranges can be claimed by anyone who announces them to the global routing system, and Cisco notes that RPKI and DNSSEC can be used to prevent it - meaning the exposure sits in routing configuration most network operators never check.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related