Fergie's Tech Blog

Russian Business Network: Faking Its Demise

Via RBN Exploit.

HYPOTHESIS: Logically RBNs fake anti-spyware or rogue software should show major changes in serving and hosting over the last week or so, if the demise of the RBN is correct. Fortunately based on limited CYBERINT earlier we were able to show 57 well known ‘fakes’ and 34 of the top 40 being RBN related, below can be seen the specifics.

RESULT: With the exception of the loss of replacement of AS40989 secondary name servers there has been little or no change to the core IP addresses.

posted by Fergie @ 11/15/2007 01:02:00 PM