[ISN] Dodgy ISP McColo briefly comes online, updates botnet

InfoSec News alerts at infosecnews.org
Tue Nov 18 01:08:54 CST 2008


http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=security&articleId=9120538

By Jeremy Kirk
November 17, 2008 
IDG News Service

An ISP associated with online crime and child pornography briefly came 
back online over the weekend before being cut off again, according to 
security vendors.

McColo, whose servers are in San Jose, was cut off from the Internet 
last week by its upstream providers after an investigation by computer 
security analysts and The Washington Post.

But McColo came back online on Saturday, after connecting with Swedish 
ISP TeliaSonera, which has a router in San Jose, according to Ross 
Thomas, writing on the blog for security vendor Sophos.

After complaints, TeliaSonera quickly moved to cut off McColo again, 
Thomas wrote. But the brief renewal in connectivity did allow 
cybercriminals running botnets out of McColo's networks to take steps to 
preserve their operations.

[...]




More information about the ISN mailing list