Check Website
Inclusion Status
It is currently Tue Oct 24, 2017 9:13 am

All times are UTC




Post new topic Reply to topic  [ 1 post ] 
Author Message
 Post subject: Crimeware friendly ISPs: StarNet
PostPosted: Fri Jun 18, 2010 3:56 am 
Offline
Site Admin

Joined: Thu May 28, 2009 10:25 am
Posts: 6000
Crimeware friendly ISPs: StarNet (AS31252 195.206.246.0/23 STARNET-AS StarNet Moldova)

Quote:
Moldova based ISP, StarNet (AS31252) has been on every security researchers radar for a considerable amount of time now, and this isn't looking to change any time soon.

StarNet is just one of several ISPs in Moldova, that's a haven for criminals spreading a multitude of malicious content, and the largest portion of this, is rogues. Monitoring one of the MITMs they're using, you can see new domains popping up every hour or so, this time though, the domain itself doesn't actually resolve, presumably this is an attempt to stop blacklist operators from being able to pinpoint the domains to blacklist. I say that because they're actually using wildcards, so for example, baddomain.com won't resolve but somerandomstring.baddomain.com will resolve. This means there's an impossibly large number of potential strings that can be used, and they know we can't possibly know all of them.


Read more
http://hphosts.blogspot.com/2010/06/cri ... 31252.html

_________________
Regards
Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!



IP:
top
Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 1 post ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
hpHosts and hpHosts Online are copyright © Malwarebytes Corp - All Rights Reserved

Powered by phpBB © 2000-2009 phpBB Group