« October 2007 · April 2008 · March 2010 »

December 2007
MonTueWedThuFriSatSun
     0102
03040506070809
10111213141516
17181920212223
24252627282930
31      
January 2008
MonTueWedThuFriSatSun
 010203040506
07080910111213
14151617181920
21222324252627
28293031   
February 2008
MonTueWedThuFriSatSun
    010203
04050607080910
11121314151617
18192021222324
2526272829  

Calendar:

  • 29.02.2008: ISO4 Conference - Sunnyvale California, United States
  • 20.02.2008: NSP-SEC Summit - San Jose California, United States
  • 18.02.2008: Gambling Websites Under Attack
  • 10.02.2008: Storm Worm Valentine's Day Update
  • 09.02.2008: Inbot08 Conference - Aachen, Germany
  • 30.01.2008: Citigroup BITS - New York, United States
  • 28.01.2008: Storm Worm & Stock Spam - The Never Ending Bag of Tricks
  • 09.01.2008: See below.
  • 08.01.2008: Storm goes phishing?
  • 07.01.2008: Storm Worm and Stock Spam
  • 06.01.2008: RBN as RBusiness Network AS40898 - Clarifying the guesswork of Criminal Activity
  • 02.01.2008: Happy New Year to All!
  • 19.12.2007: MSISAC National Webcast - Albany New York, United States
Newest first Oldest first

Wednesday, 9 January 2008

Storm Worm Domains Offline


There is some good news to report related to the the last 17 Storm Worm domains, including the banking related ones we discussed yesterday. It appears they have all been placed in a status of "NOT DELEGATED" over at nic.ru, preventing A records from being returned when looking up the domains. While i-halifax.com and i-barclays.com have had their NS records also removed from the WHOIS information, it is still present for the 15 holiday related domains.

This is pretty encouraging news and should cut down on a lot of new infections from people getting to old e-mail. We are not positive this activity was initiated by nic.ru but are hoping that it was.

=>Posted January 09, 2008, at 09:01 AM by Steven Adair