Detecting and Blocking the Russian Business Network
Bleeding Edge Threats recently announced the release of some very handy RBN blocking/detecting rulesets.More here.
Remember RBN's fake anti virus and anti spyware software? The list is getting bigger with another 20 additions again hosted on RBN IPs exposed by the RBNExploit blog.
Meanwhile you may be also be interested in how does an abuse request get handled at the RBN? Deceptively of course. Each and every domain or IP that has been somehow reported malicious to them, not once but numerous times by different organizations starts serving a fake account suspended message like the following malicious domains hosted at the RBN do :
"This Account Has Been Suspended For Violation Of Hosting Terms And Conditions. Please contact the billing/support department as soon as possible."
posted by Fergie @ 11/03/2007 01:35:00 PM
0 Comments:
Post a Comment
<< Home