Mega International DNS Malware Operation Dismantled, Reports FBI

FBI today announced six Estonian nationals have been arrested and charged with running a sophisticated Internet fraud ring that infected millions of computers worldwide with a virus and enabled the thieves to manipulate the multi-billion-dollar Internet advertising industry. Users of infected machines were unaware that their computers had been compromised -- or that the malicious software rendered their machines vulnerable to a host of other viruses. more

NTAG Chair Blog: What Is the Next GAC Advice?

Last week, New gTLD Applicant Group (NTAG) members - who account for over half of the applications submitted to ICANN in this round - issued a unanimous letter to ICANN's New gTLD Program Committee (NGPC) urging decisive action on Government Advisory Committee (GAC) Category 1 Advice at their upcoming February 5th meeting. The NGPC has been committing to address outstanding items of the GAC Advice in a manner that allows the largest possible number of applicants to proceed since last September. more

FIFA and the Perils of No Accountability

Forgive me if you can, but I am about to say something blindingly obvious. The arrests made by the US Government and Swiss authorities of senior FIFA officials should remind us of a deep truth. Organizations must be accountable: to members, to users, to superiors, to markets, to someone who can say "stop what you are doing and amend your ways". When we consider the transfer of authority from the USG over the IANA function, let us keep in mind... more

Australians Prefer .au Domain Names, Usage on the Rise

AusRegistry today released survey results of more than 3,000 Australians confirming that .au domain name registrations are on the rise, with 76% of all domain name holders choosing .au, an increase of 2% from last year. The survey also found .au remains Australia's home on the Internet with more than double the level of trust over any other namespace. more

Where is the Standard ‘Socket’ for Broadband?

When you plug into a broadband socket, what you are accessing is a distributed computing service that supplies information exchange. What is the service description and interface definition? For inspiration, we can look at the UK power plug. One of the great unsung fit-for-purpose innovations in British society is the BS1363 13 ampere power plug and socket. This is superior to other plugs by virtue of its solid construction and safe design. more

ICANN Proceeds With Batching… For Now

Yesterday, ICANN released a statement to confirm its intention to evaluate new Top-Level Domain applicants in batches using the proposed timestamp system (digital archery) to determine the batches. Whilst this is not the result I was hoping for, I was not surprised by this move. more

Daily Search Engine Usage Reaching Email Usage

Use of search engines on a daily bases has been steadily rising from about one-third in 2002 to current rate of just under 50% according to a recent report by Pew Internet & American Life Project. With this increase, the search engine use will soon be reaching that of email which is currently 60% of internet users. The study also points out that these "new figures propel search further out of the pack, well ahead of other popular internet activities, such as checking the news, which 39% of internet users do on a typical day, or checking the weather, which 30% do on a typical day." more

The FBI and the iPhone: Important Unanswered Questions

As you probably know, the FBI has gotten into Syed Farook's iPhone. Many people have asked the obvious questions: how did the FBI do it, will they tell Apple, did they find anything useful, etc.? I think there are deeper questions that really get to the full import of the break. How expensive is the attack? Security - and by extension, insecurity - are not absolutes. Rather, they're only meaningful concepts if they include some notion of the cost of an attack. more

IoT Botnet Source Code Responsible for Historic Attack Has Been Publicly Released

The source code for the IoT botnet 'Mirai' has been released," warns security expert Brian Krebs whose own website was targeted with the same botnet resulting in the historically large DDoS attack last month. more

German Minister: Facebook Should Be Treated as Media Company, Held Criminally Liable for Hate Speech

Germany's Justice Minister says Facebook should be treated like a media company rather than a technology platform, suggesting he favors moves to make social media groups criminally liable for failing to remove hate speech. more

Streaming Video Continues to Grow

I saw recent headlines that claim that the time people watch streaming content is now greater than all of the time spent watching content from cable companies. A deeper look at the underlying statistics shows that this isn't entirely true, but it makes for a great headline. But it's still news that the percentage of viewing done through streaming continues to grow while the number of traditional cable customers continues to plunge. more

New Research Finds Over 80% of Domain Names Used by Phishers Are Legitimate Domains

New research from the Anti-Phishing Working Group (APWG) has found that up to 81% of domain names used for phishing are legitimate domains that have been hacked. More specifically, out of the 30,454 phishing domains under observation, only 5,591 domain names (18.5%) were registered by phishers according to APWG. The remaining small percentage of the domains used in phishing belonged to subdomain resellers such as ISPs and other web-based services. more

Growing Popularity of .AI and Domain Security

I recently had the opportunity to speak on a podcast with Dave Bittner at CyberWire to discuss how .AI is giving cybercriminals a new avenue to take advantage of some of the largest companies in the world based on research findings from CSC's 2023 Domain Security Report. Below is a summary of the key points discussed during this podcast. more

M3AAWG Offers Some Sensible Password Advice

M3AAWG is a trade association that brings together ISPs, hosting providers, bulk mailers, and a lot of infrastructure vendors to discuss messaging abuse, malware, and mobile abuse. (Those comprise the M3.) One of the things they do is publish best practice documents for network and mail operators, including two recently published, one on Password Recommendations for Account Providers, and another on Password Managers Usage Recommendations. more

Total Domains Registered Reach 183 Million World Wide, .COM, .CN, .DE Top the List

The total number of domain names have grown to 180 million world wide, according to the first quarter 2009 Domain Name Industry Brief published by VeriSign. The first quarter of 2009 reached a base of 183 million domain name registrations across all of the Top Level Domain Names (TLDs) -- a 3% increase over the fourth quarter of 2008 and a 12% increase over the same quarter from last year. Country Code TLDs (ccTLDs) rose to 74.1 million domain names during the first quarter, a four percent jump from the previous quarter and an 18 percent increase year over year. Gauged by total registrations, .com remains the most popular TLD category, followed by .cn (China), .de (Germany) and .net. This composition remains unchanged from Q4 2008. more