• Home
  • About 404TS
  • Contact

404 Tech Support

Where IT Help is Found

  • Articles
    • Code
    • Entertainment
    • Going Green
    • Hardware, Gadgets, and Products
    • Management
    • Network
    • News
    • Operating Systems
    • Security and Privacy
    • Software
    • System Administration
    • Talking Points
    • Tech Solutions
    • Web
    • Webmaster
  • Reviews
  • Media
    • Infographics
    • Videos
  • Tech Events
  • Tools
    • How do I find my IP address?
    • Browser and plugin tests
  • Get a Technical Consultation
You are here: Home / Articles / News / Microsoft takes down No-IP for passive role with malware

Microsoft takes down No-IP for passive role with malware

2014-07-02 by Jason

Microsoft took to the offense this week against malware, specifically Bladabindi (NJrat) and Jenxcus (NJw0rm) family of malware. This was their third malware disruption since November’s launch of the Microsoft Cybercrime Center. In their sights to try to shut down this malware was another U.S.-based company, No-IP, with parent company Vitalwerks Internet Solutions, LLC.

Microsoft made a case to a District Court in Nevada, No-IP’s home state, and was granted the request for Microsoft to assume the DNS authority for the free No-IP domains. Their claim is that No-IP is providing the infrastructure to enable this malware’s command-and-control. They then redirected the traffic to a DNS sinkhole so it could be analyzed to remedy infected computers.

Our research revealed that out of all Dynamic DNS providers, No-IP domains are used 93 percent of the time for Bladabindi-Jenxcus infections, which are the most prevalent among the 245 different types of malware currently exploiting No-IP domains.

Cisco also has a technical blog article from February that pretty prominently points the finger at No-IP for being a Dynamic DNS infrastructure with the majority of its traffic being illegitimate. Microsoft believes No-IP has a responsibility to hamper this traffic and be more proactive in monitoring its infrastructure.

microsoft_dns_malware

Here’s Microsoft’s explanation of the steps they took in response to this targeted malware.

On June 19, Microsoft filed for an ex parte temporary restraining order (TRO) from the U.S. District Court for Nevada against No-IP. On June 26, the court granted our request and made Microsoft the DNS authority for the company’s 23 free No-IP domains, allowing us to identify and route all known bad traffic to the Microsoft sinkhole and classify the identified threats. The new threat information will be added to Microsoft’s Cyber Threat Intelligence Program (CTIP) and provided to Internet Service Providers (ISPs) and global Computer Emergency Response Teams (CERTs) to help repair the damage caused by Bladabindi-Jenxcus and other types of malware.

Organizations and individuals that were using No-IP’s services for legitimate purposes have been experiencing  outages. What has followed since Microsoft took action has gotten into the he-said, she said. No-IP has their own response article and are currently directing people to five domains still under their control that have not been seized by Microsoft. They stick by their abuse policy and history of working with other companies to take down malicious activity. This will certainly harm No-IP’s reputation and ability to gain future business even if they drop their free dynamic DNS services completely.

This will be one for the courts to decide. In the meantime, another malware network being disrupted benefits the entire world.

Filed Under: News, Security and Privacy

Trending

  • Using RunAs With Active Directory Users And Computers and Group Policy Management Console
    In Code, Security and Privacy, System Administration
  • Microsoft Reaches License Agreement with Compal Electronics For Android Patents
    In Hardware, Gadgets, and Products, News
  • Details, Details – Everything To Know About Standard Computer Screws
    In Hardware, Gadgets, and Products, Media

Latest Media Posts

Find Out Where To Download SNES ROMs

Find Out Where To Download SNES ROMs

Multifunctional Video Conversion Tools – Wondershare Video Converter

Multifunctional Video Conversion Tools – Wondershare Video Converter

  • Popular
  • Latest
  • Today Week Month All
  • How to ‘Unblock’ multiple files at a time with PowerShell How to 'Unblock' multiple files at a time with PowerShell
  • Increase IIS Private Memory Limit to improve WSUS availability Increase IIS Private Memory Limit to improve WSUS availability
  • Configure Outlook to recurring appointments for the last weekday of the month Configure Outlook to recurring appointments for the last weekday of the month
  • Read the Event Logs on Windows Server Core Read the Event Logs on Windows Server Core
  • SOLVED: “This modification is not allowed because the selection is locked.” SOLVED: "This modification is not allowed because the selection is locked."
  • 3d rendering circuit cloud for cloud computing technology Build and Deploy a Modern Web 3.0 Blockchain App in 2022
  • Telecom Application Development: When to Outsource Telecom Application Development: When to Outsource
  • Printer printing document wirelessly from mobile phone or smartphone wifi connection vector flat cartoon illustration, file air print on fax or ink jet via cellphone bluetooth modern design Why Your Business Needs Online Fax Services In 2022
  • 6 Best Ways to Protect Your Business Account 6 Best Ways to Protect Your Business Account
  • How to download videos from Instagram How to download videos from Instagram
Ajax spinner

Elevator Pitch

404 Tech Support documents solutions to IT problems, shares worthwhile software and websites, and reviews hardware, consumer electronics, and technology-related books.

Subscribe to 404TS articles by email.

Recent Posts

  • Build and Deploy a Modern Web 3.0 Blockchain App in 2022
  • Telecom Application Development: When to Outsource
  • Why Your Business Needs Online Fax Services In 2022

Search

FTC Disclaimer

404TechSupport is an Amazon.com affiliate; when you click on an Amazon link from 404TS, the site gets a cut of the proceeds from whatever you buy. This site also uses Skimlinks for smart monetization of other affiliate links.
Use of this site requires displaying and viewing ads as they are presented.

Copyright © 2022 · Magazine Pro Theme on Genesis Framework · WordPress · Log in