Category Archives: Cybercrime

M3AAWG/APWG Report Finds GDPR Impact on WHOIS Impedes Criminal Investigations

The Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG) and The Anti-Phishing Working Group (APWG) have again collaborated to conduct a survey of cyber investigators and anti-abuse service providers to understand how ICANN’s application of the European Union’s General Data Protection Regulation (GDPR) has impacted on the distributed WHOIS service and anti-abuse work. The resulting report, published in June, discusses the effect of the Temporary Specification on anti-abuse actors’ access and usage of domain name registration information, which is central for various types of investigations.

Continue reading M3AAWG/APWG Report Finds GDPR Impact on WHOIS Impedes Criminal Investigations

Beware Free Wi-Fi: Government Urges Workers to Avoid Public Networks

The Biden administration would like you to get a vaccine and wear a mask. Oh, and one more thing: It has just proclaimed that it’s time for government employees and contractors to get off public Wi-Fi, where they can pick up another kind of virus.

Continue reading Beware Free Wi-Fi: Government Urges Workers to Avoid Public Networks

Turn off, turn on: Simple step can thwart top phone hackers

As a member of the secretive Senate Intelligence Committee, Sen. Angus King has reason to worry about hackers. At a briefing by security staff this year, he said he got some advice on how to help keep his cellphone secure.

Continue reading Turn off, turn on: Simple step can thwart top phone hackers

Microsoft Targets Homoglyph Domains Used by Cybercriminals Targeting Businesses

Microsoft’s Digital Crimes Unit secured a court order last week to take down malicious infrastructure used by cybercriminals, targeting the use of “homoglyph” ­– or imposter – domains. Homoglyph domains are increasingly being used in a variety of attacks by cybercriminals. As a result, a judge in the Eastern District of Virginia issued a court order on 16 July requiring domain registrars to disable the malicious domains that have been used to impersonate Microsoft customers and commit fraud.

Continue reading Microsoft Targets Homoglyph Domains Used by Cybercriminals Targeting Businesses

DNS Abuse Institute Publishes Roadmap For Combatting Abuse

DNS Abuse –malware, botnets, phishing, pharming, and spam – is a growing and ongoing global threat to every country’s national and economic security. In the last months, the DNS Abuse Institute has worked to bring together – both in public forums and individual meetings – leading experts to help guide the creation of a roadmap for combating abuse.

Continue reading DNS Abuse Institute Publishes Roadmap For Combatting Abuse

Average Digital Shadows Client Has 1,100 Impersonating Domains and Subdomains Detected Each Year

The average Digital Shadows client isn’t a small company, but the company reports in their latest Impersonating Domains Report an average client has 1,100 impersonating domains and subdomains detected on average per year.

Continue reading Average Digital Shadows Client Has 1,100 Impersonating Domains and Subdomains Detected Each Year

Russia’s most aggressive ransomware group disappeared. It’s unclear who disabled them.

Just days after President Biden demanded that President Vladimir V. Putin of Russia shut down ransomware groups attacking American targets, the most aggressive of the groups suddenly went off-line early Tuesday.

The mystery is who made it happen.

Continue reading Russia’s most aggressive ransomware group disappeared. It’s unclear who disabled them.