[ISN] Dodgy ISP McColo briefly comes online, updates botnet

From: InfoSec News <alerts_at_private>
Date: Tue, 18 Nov 2008 01:08:54 -0600 (CST)

By Jeremy Kirk
November 17, 2008 
IDG News Service

An ISP associated with online crime and child pornography briefly came 
back online over the weekend before being cut off again, according to 
security vendors.

McColo, whose servers are in San Jose, was cut off from the Internet 
last week by its upstream providers after an investigation by computer 
security analysts and The Washington Post.

But McColo came back online on Saturday, after connecting with Swedish 
ISP TeliaSonera, which has a router in San Jose, according to Ross 
Thomas, writing on the blog for security vendor Sophos.

After complaints, TeliaSonera quickly moved to cut off McColo again, 
Thomas wrote. But the brief renewal in connectivity did allow 
cybercriminals running botnets out of McColo's networks to take steps to 
preserve their operations.


Visit the InfoSec News Security Bookstore
Best Selling Security Books and More!
Received on Mon Nov 17 2008 - 23:08:54 PST

This archive was generated by hypermail 2.2.0 : Mon Nov 17 2008 - 23:12:39 PST