Russian Business Network study - bizeul.org

More documents

Recommendations

Info

Version 1.0.1 RBN study – before and after David Bizeul Overview It’s interesting to observe that many recent cyber crime troubles are relating to Russia. This observation is obviously a simple shortening. Indeed nothing seems to link to Russia at first sight, it’s a nasty country for sending spam but many are worst, Russia is only the 8 th top spam country [ 1 ]. We need to dig deeper to identify that cyber crime is originating mostly from Russian dark zones. In a digital world, those dark zones exist where the Internet becomes invisible and it’s used for collecting phishing sites credentials, for distributing drive by download exploits, for collecting malware stolen data, etc. It’s a considerable black market as it has been revealed in this paper [ 2 ]. A lot of information can be available over the web on Russian malicious activities and precisely on the way RBN (Russian Business Network) plays a major role in these cases. 1. Russian cybercrime Before going into RBN deeply, it’s interesting to focus a few moments on Russia. This country has always been known for its good virus writers. Some of their creations (Bagel, MyDoom, Netsky) have been a plague to fight against for some readers. In Russia, hacking philosophy is a common attitude and some technical magazines written in Russian have a real success. Moreover young people have good computing skills but it seems there is a lack of facilities for IT employment. In this context, over-educated people or highly skilled guys have to find ways to use their abilities to earn money and some of them will chose to offer their skills for cybercrime. Several industry fields have been designated as good targets: • World financial economy first: foreign victims may have wealthy bank accounts. And banks are supposed to offer adapted services to their customer in a moving world such as worldwide money transfers. This can be a very juicy activity. • Software industry: that’s a common situation when people do not have sufficient money to buy desired stuff, they steal it. That’s what’s happening with software industry, there is a widespread piracy on almost everything digital. This piracy is very visible in Russia because the principle of pay-for-use is not really accepted. • Sex: this field has always been considered as a very profitable one, that’s a reason why there is a lot of pornography websites hosted in Russia as in other country where laws are inefficient to fight against this. A very good web page offers an interesting analysis on Russia hidden face nowadays [ 3 ]. 1 http://www.sophos.com/pressoffice/news/articles/2007/07/dirtydozjul07.html 2 http://sparrow.ece.cmu.edu/group/pub/franklin_paxson_perrig_savage_miscreants.pdf 3 http://www.crime-research.org/analytics/Viruses_Russia/ 4
Version 1.0.1 RBN study – before and after David Bizeul 2. RBN at a glance If you still wonder what the role of RBN is in Russian cybercrime, the following image should give you a better idea. RBN offers a complete infrastructure to achieve malicious activities. It’s a cybercrime service provider. Whatever the activity is: phishing, malware hosting, gambling, child pornography… RBN will offer the convenient solution to fulfil it. When using search engines to collect data, RBN can be easily convicted of many cybercrime activities. Next paragraphs will focus on some of these activities. Many names or IP addresses ranges will be detailed later in this study. 5
Page 1 and 2: Russian Business Network study Vers
Page 3: Version 1.0.1 RBN study - before an
Page 7 and 8: Version 1.0.1 RBN study - before an
Page 33 and 34: Version 1.0.1 New York,NY,US 10019
Page 35 and 36: Version 1.0.1 New York, NY 10018,-,
Page 41 and 42: Version 1.0.1 City map RBN study -
Page 47 and 48: Version 1.0.1 Filtering bad network
Page 53 and 54: Version 1.0 David Bizeul RBN study
Page 55 and 56:
Version 1.0 David Bizeul RBN study
Page 57 and 58:
Page 59 and 60:
Page 61 and 62:
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
Page 69 and 70:
show all

Russian Business Network study - bizeul.org

Create successful ePaper yourself

Delete template?

Save as template?