Emerging Threats

http://voices.washingtonpost.com/securityfix/2008/09/estdomains.html

A new article up about ESTDomains by Brian Krebs at the Washington Post, data contributions from our sandnet and other members of the emerging community helped out in this. On the heels of the last Atrivo article again built partly on our data. Lets hope it has a similar effect as did the Atrivo research!

An update as well on the Atrivo story originally here:

http://voices.washingtonpost.com/securityfix/2008/08/report_slams_us_host_as_major.html

Update:
http://voices.washingtonpost.com/securityfix/2008/09/scam-heavy_us_isp_grows_more_i.html

Note that Broadcon was the only provider still willing to continue to provide connectivity to Atrivo.

snip

Update, Monday, Sept 8, 12:00 p.m. ET: Todd Braning, vice president of BandCon, just e-mailed me to say that BandCon also has stopped providing connectivity to Atrivo/Intercage. From his e-mail: "Intercage, a new customer, was connected to the BandCon Network for total of about a week. Once we recognized and issue with Intercage, BandCon took immediate action and terminated services. We are no longer providing services to AS27595. This can be confirmed here."

WVFiber is the only company still providing direct connectivity to Atrivo, and as stated before they plan to pull the plug by Thursday at the latest, so it appears that Atrivo will have to find another network provider or it will very soon cease to be reachable on the Internet.

snip

All good news. Atrivo/Intercage have been a huge malware problem for a long time. This takes a good chunk of bad out of the Internet. Not a major chunk, there are many other hosts like Atrivo, but this is a step in the right direction. I'm VERY reassured to see some positive action by the responsible bandwidth providers and by nLayer who've discontinued business with a known bad entity, and in nLayer's case taken back their IP space.

We CAN make a difference, and it doesn't have to be via law enforcement action, which as we all know can be difficult to initiate in the light of how this kind of crime works across global jurisdiction.

Matt