Re: RBN and it's spin-offs

[Paul Ferguson <fergdawgster () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, Dec 30, 2009 at 8:25 PM, Christopher Morrow
<morrowc.lists () gmail com> wrote:

> On Wed, Dec 30, 2009 at 11:13 PM, William Pitcock
> <nenolod () systeminplace net> wrote:
>
> > It "worked" against Indymedia UK: http://www.indymedia.org/fbi/
>
> indymedia is in texas, no mlat required.

Exactly.

> rbn was actually, for a good portion of their existence, in Russia (I
> believe St Petersburg, but my memory is fuzzy).

Yes, their original "bullet-proof" hosting was located there [AS40989]
until they received too much publicity, and then they "diversified" into
hosting facilities all over the world.

If anything, their criminal "partnerka" networks have grown and thrived,
for the most part out of the reach of the "long arm of the law"
enforcement, due to geopolitical issues, sheer protectionist corruption,
and clever (albeit illegal) business practices.

Brian Krebs at The Washington Post did an excellent job of reporting on the
ongoing Russkrainian organized online criminal operations, et al:

http://voices.washingtonpost.com/cgi-bin/mt/mt-search.cgi?search=russian+bu
siness+network&blog_id=66&MaxResults=100

...but as of the first of the year, alas, Krebs is no longer working for
WaPo:

http://voices.washingtonpost.com/securityfix/2009/12/farewell_2009_and_the_
washingt.html

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.5.3 (Build 5003)

wj8DBQFLPCpEq1pz9mNUZTMRAk9DAKCvwK5ZhVu/n1jBX9rcsFpG3uYmFQCdE5C7
eYDC7w8NXWD+0xJ9SpcR+xw=
=l7A1
-----END PGP SIGNATURE-----

-- 
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawgster(at)gmail.com
 ferg's tech blog: http://fergdawg.blogspot.com/