Computerworld
Russian hacker gang vanishes again, day after moving to China
Latest RBN vanishing act leaves researchers scratching their heads
Gregg Keizer  13 November, 2007 09:27

Where RBN has gone or whether it will resurface is, however, a mystery for now. ""Where will they go next, assuming they want to reproduce the same model somewhere else? I don't know," said the iDefense analyst.

According to iDefense, RBN as a single organization may be dead and gone. The model used in Russia, which it replicated momentarily in China, was of a top-down, centrally-controlled network in which one or two Internet service providers (ISP) connected a number of semilegitimate companies to the Web. Those companies, in turn, rented so-called bulletproof servers to criminals, meaning that the servers wouldn't be taken offline when complaints were filed by security researchers.

"It was great in terms of control and in terms of money," said the iDefense analyst, noting that the vertical integration put more money in the organization's pockets.

Rather than return in that format, RBN may even now be breaking up into smaller pieces farmed out to multiple countries' Internet infrastructures. "That may keep it under the radar, but it's also more expensive for them, and it's riskier, too, because the more ISPs that it has to deal with, the better the chance that one of those ISPs says 'no' to hosting RBN content and shuts them off," said the analyst.

On the plus side -- for its clients -- by splitting up, RBN can delay detection and make prosecution difficult. "It's a lot harder for law enforcement when there are six or seven countries involved," said the iDefense researcher. "But I think we'll be able to track them. We've done that kind of thing before when a group has been spread across two or more ISPs."

But as a monolithic, centrally-controlled organization -- ironically the model that dominated the now-defunct Soviet Union -- RBN is likely dead. "As we've known it, I think RBN is gone," said the researcher.

Computerworld Buyer's Guide - Vendors Matched to this Article
More about VeriSign, PLUS, ACT, iDefense

Comments

Post new comment

Login or register to link comments to your user profile, or you may also post a comment without being logged in.
The content of this field is kept private and will not be shown publicly.
Enter the fully qualified URL, eg. http://www.example.com/
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

More information about formatting options

Add to Google
Computerworld Buyer's Guide - Vendors Matched to this Article
Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.
Newsletter Subscription
Newsletter Subscription
Sign up for our Computerworld newsletters!
Syndicate content
 

Computerworld Webinar

Thursday, June 11th, 2009
10:30am EST (Sydney, Australia)
Screening at your PC

Computerworld is hosting a 30 minute live webinar to help you to learn how unified communications can save you money, foster innovation and business agility by making it easier for people to find, reach and collaborate with one another.

Register Now

Computerworld Community Comments
Whitepaper

Data Centre Assessments: The First Step to Optimisation

A well-designed and executed assessment supports the ability to respond to a change in the business environment. Help make good management decisions by knowing what you have, what it can and can’t do, and where investment gives the greatest returns. Read on.

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links
 
Send Us E-mail | Privacy Policy
Features List | Media Kit | Advertising | Contact Us

Copyright 2009 IDG Communications. ABN 14 001 592 650. All rights reserved.
Reproduction in whole or in part in any form or medium without express written permission of IDG Communications is prohibited.