Slashdot Mirror


Russian Phishers Moving to China?

Hugh Pickens writes "The Russian Business Network, an ISP and Web hosting provider based in St. Petersburg, whose client list amounts to a laundry list of organized cybercrime operations appears to have closed shop after a number of its main upstream Internet providers severed ties with the group. The disappearance of RBN comes less than a month after Brian Krebs of the Washington Post wrote a series of stories detailing the organization and history of the shadowy ISP. However, experts at anti-spam group Spamhaus say there are strong indications that a huge swath of Internet space recently established in China may soon emerge as the next incarnation of the Russian Business Network. In related news FBI Director Robert S. Mueller, III gave a speech on cybercrime earlier this week where he said that the FBI has 60 Legal Attaché offices around the world working with partners in Russia, Romania,Poland, Hungary, Italy, and Estonia, among others, to investigate international cyber threats."

67 comments

  1. ISR by eneville · · Score: 3, Funny

    I soviet China ... oh wait ...

    1. Re:ISR by Anonymous Coward · · Score: 0

      What does Interrupt Service Routine have to do with Soviet China?

      Oh.. nevermind

    2. Re:ISR by renegadesx · · Score: 1

      China moves you?

      --
      Make SELinux enforcing again!
  2. The reason is obvious by antifoidulus · · Score: 0

    the Russian mafia has a serious asian fetish!

  3. Russian Fishers Moving to China? by colonslashslash · · Score: 3, Funny

    Have all their lakes frozen over or something? Damn you global warming!

    --
    She's built like a steak house, but she handles like a bistro....
    1. Re:Russian Fishers Moving to China? by Echolima · · Score: 5, Funny

      I hate when Global Warming causes lakes to freeze

    2. Re:Russian Fishers Moving to China? by Anonymous Coward · · Score: 0

      Whooooooosh!

    3. Re:Russian Fishers Moving to China? by pipingguy · · Score: 1

      Dummy, it's like that chaos butterfly thingie where anything can cause anything else depending on access to sympathetic mainstream media and grant money. Straighten up and fly right (err...left)!

    4. Re:Russian Fishers Moving to China? by Anonymous Coward · · Score: 0

      Good job! You've discovered the punchline!

  4. This is good by Anonymous Coward · · Score: 0

    It is common knowledge in the US that one should not consume phish from China.

    1. Re:This is good by chubs730 · · Score: 1

      phish is properly enjoyed in vermont

    2. Re:This is good by Grimbleton · · Score: 1

      Just keep away from anything that came from, around, or, realistically, has ever heard of Lake Erie.

  5. Even phishing is being outsourced? by zappepcs · · Score: 3, Funny

    With phishing being outsourced to China, manufacturing being outsourced to China, Can we expect lead based paint recall phishing to come from China soon?

    1. Re:Even phishing is being outsourced? by Anonymous Coward · · Score: 0

      I can see it now:

      From: aafekfkelalfe@toyrus.fjakjekfje.com
      Subject: ATENTION PARENTS!
      Text: You child may have toy with lead (Pb)! Lead (Pb) is very dangerous, please click link below and enter credit card information to see if you child toy have lead (Pb)! We then check credit card record to see if you buy toy with lead (Pb)!

  6. internet 101 by KevMar · · Score: 5, Insightful

    so they move to a country that restricts what they can access on the internet?

    Thats exactly what I would do if I was the ring leader of major internet crime...

    --
    Im a gamer, not a grammer major. This post is full of spelling and grammer mistakes.
    1. Re:internet 101 by TheMeuge · · Score: 1

      It's not about what goes in, but what comes out. And if you grease enough party officials, the Great Firewall of China will turn out to have a lot of trap doors.

    2. Re:internet 101 by BadHaggis · · Score: 5, Insightful

      Yes, but if the money is flowing into the right pocket(s) certain services/servers can bypass The Great Firewall. I am sure that these esteemed, and apparently resourceful, businessmen can negotiate a profitable relationship with the Chinese Government. Additionally, I'm not convinced that the Chinese Government is as concerned with what goes out of their country as much as they are concerned with what comes in. Certainly, given the all of the product recalls lately, you're aware of the high standards that the Chinese hold to their exports.

      --
      Homo homini lupus
    3. Re:internet 101 by Deanalator · · Score: 2, Interesting

      Sorry, but that's not super fair. If you have been following the stories, Chinese toy makers are now suing Mattel for damaging their reputation. The toys that were recalled were built completely to spec with the designs Mattel gave them. When a toy contains many small magnets that can be swallowed, how can you blame the manufacturers, and not the designers?
      http://www.chinadaily.com.cn/language_tips/cdaudio/2007-11/06/content_6234061.htm

      Also, the latest round of recalls came from Mexico.
      http://www.canada.com/reginaleaderpost/news/business_agriculture/story.html?id=6bbd57b0-e1d3-48d9-9a14-ebe3e6b24c04

      China can make high quality electronic equipment, and they can also make low quality toys. You can't really blame them for making what they were paid to make.

    4. Re:internet 101 by Anonymous Coward · · Score: 0

      It's not about what goes in, but what comes out. And if you grease enough party officials, the Great Firewall of China will turn out to have a lot of trap doors.

      If you grease the wrong party officials they'll open a port in your head instead of the Great Firewall.

    5. Re:internet 101 by CharmElCheikh · · Score: 2, Interesting

      If you can justify to the national ISP that unmonitored Internet access is a business requirement and are willing to pay your access more expensive you get your unmonitored access. It is not illegal, it is not bribery. I know it, my company does it.

      --
      My /. user ID is probably higher than yours
  7. Hmm by orclevegam · · Score: 1

    Pretty soon the only large organized internet crime is going to be the government run kind.

    --
    Curiosity was framed, Ignorance killed the cat.
    1. Re:Hmm by Anonymous Coward · · Score: 0

      what do you mean - "soon"?

    2. Re:Hmm by Glowing+Fish · · Score: 1

      Just remember, there is no "soon"

      --
      Hopefully I didn't put any [] around my words.
    3. Re:Hmm by Chris+Mattern · · Score: 1

      Why should the internet be different from everywhere else?

      Chris Mattern

  8. Laundering by kryten250 · · Score: 1

    "And they laundered money through more than a dozen Internet gambling sites." Aren't there better ways? I mean this has been done for years and it's part of the reason the US has the $10,000 rule.

    --
    FlyingPizzas.com, for the tasteful hermit
  9. Time for a third wife, then by spywhere · · Score: 1

    My first wife was American. Second time around, I married a Russian lawyer. Back to eBay, I guess... How much to ship 110 pounds from China, including airholes?

    1. Re:Time for a third wife, then by night_flyer · · Score: 2, Funny

      Airholes shouldnt weigh too much

      --


      Thanks to file sharing, I purchase more CDs
      Thanks to the RIAA, I buy them used...
    2. Re:Time for a third wife, then by Critical+Facilities · · Score: 1

      Hey, don't be an airhole, the guy was trying to make a joke.

    3. Re:Time for a third wife, then by __aaxwdb6741 · · Score: 1

      Your's, however, might not catch much air at all.

    4. Re:Time for a third wife, then by Anonymous Coward · · Score: 0

      110 pounds? Are you ordering a spare too?

  10. Coming Soon... by SlipperHat · · Score: 1

    The Great Firewall of China meets the Russian Phishing Pond *in* China!

  11. But will we notice? by Glowing+Fish · · Score: 1

    Do you think this will make a noticeable difference in the amount of spam coming through?

    I have to say that since 1998, I have really noticed only an increase in the amount of spam, with the only downward swings coming from changing accounts, or my ISP implementing better spam filters. I guess I shouldn't say I haven't noticed any downswings, I have noticed a return to normal levels after a week or so of getting the same spam over and over.

    But I don't think we will even notice this for the week or so it takes the spam people to set up shop somewhere else.

    --
    Hopefully I didn't put any [] around my words.
  12. Net Blocks Withdrawn? by rel4x · · Score: 1

    According to every single one of the cidr-reports referenced by that spamhaus article, all the blocks of IPs were "withdrawn" Example: http://cidr-report.org/cgi-bin/as-report?as=AS42811

    --

    Before you mod me funny, think, perhaps I was insightfully funny?
  13. In Soviet China by Anonymous Coward · · Score: 0

    Phishers get THEM!

    I mean, phishers get THEM!

    Whoops.

    Either way they're screwed.

  14. FBI Humor by handy_vandal · · Score: 5, Informative
    FBI Director Robert S. Mueller III sure knows how to slay 'em on the college circuit:

    I recently watched a video on YouTube about the impact of the Internet. And before we go any further, I will answer the question of everyone under the age of 25. Yes, those of us over a certain age are allowed to access YouTube.
    And he's not alone in his youthful wisecracking -- it looks like the FBI, as an institution, has a wicked sense of humor:

    In June of this year, we initiated Operation Bot Roast.
    Link

    -kgj
    --
    -kgj
  15. So.. by eniac42 · · Score: 5, Funny

    A notice in an office-entrance in St Petersburg reads..

    Gone phishing..

    --
    "A nation that forgets its past is doomed to repeat it." - Churchill
    1. Re:So.. by blhack · · Score: 1

      I made a background out of your concept.....

      figured it was only fair to share it with you.

      Gone Phishing

      --
      NewslilySocial News. No lolcats allowed.
  16. Organized cybercrime by iamacat · · Score: 1

    I am not sure this would be very common, as Internet provides a great deal of anonymity. There is no way to find and eliminate competition and therefore no need to choose a don for protection. Likewise, if you are caught you are not able to rat out your friends besides the nicknames that they use to connect to IRC from hijacked machines. Maybe there is an agreement to perform hacking and DDOS hits on companies that cooperate with authorities to catch someone. But in general, cyber criminals are a bunch of independent agents that are not very organized.

    1. Re:Organized cybercrime by Anonymous Coward · · Score: 0

      But in general, cyber criminals are a bunch of independent agents that are not very organized.

      Not so. I'm a cyber criminal, and I shop here all the time.

      Posting as AC for obvious reasons. You know, being a cyber criminal and all.

    2. Re:Organized cybercrime by Capt.+Skinny · · Score: 1

      Damn. I though I was literal-minded.

  17. Moving to china? by Sleeping+Kirby · · Score: 1

    Phishers moving to China? I resent that. China doesn't need foreigner phishers, they have their own!!! :p

    --
    please... let me sleep... a little more... yay, no longer annonmyous coward.
  18. Hmmm.. by eniac42 · · Score: 1

    Lead-based paint? Why, that gives me an idea..

    --
    "A nation that forgets its past is doomed to repeat it." - Churchill
  19. Firewall the World by TFGeditor · · Score: 3, Interesting

    I know I will get modded into oblivion, but I do not care. This is precisely why I firewall the entire world (other than North America) from my server. None of the users nor myself have any legitimate contacts or interests overseas, so blocking all traffic sourcing anywhere except North America reduces the spam load by 98% and virtually eliminates intrusion attempts.

    Offensive to you? Why? What legitimate need do you have to access my server? My company has absolutely nothing to interest you. Therefore, what reason could you possibly have to access my server?

    Let the bloodletting begin.

    --
    Ignorance is curable, stupid is forever.
    1. Re:Firewall the World by Anonymous Coward · · Score: 0

      Texas Fish & Game Books on Sale! Texas Gun Owner's Guide!
      Do even North American users buy anything from you? Oh, and btw your "firewall" sucks, coz I'm able to access it from my work pc here in Sydney.

    2. Re:Firewall the World by TFGeditor · · Score: 1

      Different firewall, dude. The website doesn't count.

      --
      Ignorance is curable, stupid is forever.
    3. Re:Firewall the World by moz25 · · Score: 1

      It seems unlikely that anyone is going to care about you or your site.

      Then again, firewalling out high-risk IP blocks such as from China or Russia is not necessarily a bad idea. They can go to the .cn or .ru portal versions!

    4. Re:Firewall the World by TFGeditor · · Score: 1

      Our readers/customers care, hence firewalling the rest of the world.

      --
      Ignorance is curable, stupid is forever.
    5. Re:Firewall the World by moz25 · · Score: 1

      To phrase it more clearly: in spite of the flaming or downmodding you apparently expected, no one is likely to care enough about you or your site to get worked up about it.

      You already know that this method is only practical for small sites of little economic consequence and that isolationalist ideas aren't likely to be well-received on an international site like SlashDot.

      What's your point then? Are you trolling? It's not exactly a novel or clever idea to use geo-targeted filtering or routing. That's what CDNs do all the time.

    6. Re:Firewall the World by qzulla · · Score: 1

      Yer right. No one outside our country would care about Texas fish and game.

      Heck. Why not block the rest of the states? We don't care either.

      Are you the webmaster? I wouldn't admit it.

      qz

    7. Re:Firewall the World by protobion · · Score: 1

      I presume your walled website is www.fishgame.com . I accessed the site, and it seems I can get through. I even almost ordered the Free Decals. I am definitely not based in North America. So, is your website really walled? Or did you just want to get your website /.-ed.

      --
      Essentia non sunt multiplicanda praeter necessitatem.
  20. They've already set up shop..... by TW+Atwater · · Score: 1

    ...in Panama. inetnum: 81.95.148.0 - 81.95.151.255 netname: RBNET descr: RBusiness Network country: PA admin-c: RNR4-RIPE tech-c: RNR4-RIPE status: ASSIGNED PA mnt-by: RBN-MNT source: RIPE # Filtered role: RBusiness Network Registry address: RBusiness Network address: The Century Tower Building address: Ricardo J. Alfari Avenue address: Panama City address: Republic of Panama

    --
    More than 60,000 Windows programs won't run on Linux.
  21. Good Advice For Anyone by markus+o'farkus · · Score: 2, Insightful

    You should do what you are good at.

    Two things Russians are very good at: hacking and organized crime.

    When combined, it's a sight to see.

  22. The good part of the story by caller9 · · Score: 1

    So.... Block these networks. Think I got them all.
    194.110.69.0/24
    91.198.71.0/24
    91.194.140.0/23
    91.196.232.0/22
    91.195.116.0/23
    91.193.40.0/22
    91.193.56.0/22
    193.33.128.0/23

    1. Re:The good part of the story by djdavetrouble · · Score: 1

      so, how can i just block all of russia and china ?
      don't really see anything that I need there....

      --
      music lover since 1969
  23. in soviet russia by sh3l1 · · Score: 1

    In soviet Russia, the internet crimes you!

    --
    Help Me! I'm trapped in the tubes! Oh noes! Here comes a internet!
  24. FBI go home by billcopc · · Score: 1

    As much as I hate (russian|chinese|korean|nigerian) spammers/botnets, I don't see how the FBI could possibly help. I know it's draconian, but I simply block off all access to my servers from a number of IP ranges I deem unfit, and that includes the aforementioned countries. Frankly, that's all the help I need.

    Digital racism ? Maybe. It's not that I don't like chinese people, I just like them better when they don't harbor heinous criminals. Heck, I like white folk better when they don't harbor heinous criminals too, and I'm just as quick to ban them if they give me trouble.

    It's a free internet, if people don't play nice, I have no obligation to play with them.

    --
    -Billco, Fnarg.com
  25. Who is using all the IPv4 space? by Anonymous Coward · · Score: 0

    Spammers and email marketers.. always looking for virgin IP Addresses.. Be nice to see someone take up the cause of investigating how IPv4 assignments are happening, the rate that they are being picked up for marketing etc.. Too many new IP blocks are coming one line only to be seen to be just used for the purposes of fresh email IP's. In the world of email marketing, I guess IP addresses are cheap :0 Are legitmate users of IP addresses going to be hurt by this practise?

  26. At least the Phishing will be in funny by blueridge · · Score: 1

    Well, perhaps we will see some humor in the new wave of phishing as they will all be delivered in Chinglish.

  27. Firewall the US by andersh · · Score: 1

    blocking all traffic sourcing anywhere except North America reduces the spam load by 98%
    I find that very hard to believe since most spam comes from the United States according to Spamhaus. As a European I would block the US, Russia and China to keep the load off my servers.
    1. Re:Firewall the US by TFGeditor · · Score: 1

      Believe what you will. I know it works for me. Opinions/beliefs to the contrary are irrelevant.

      --
      Ignorance is curable, stupid is forever.
    2. Re:Firewall the US by andersh · · Score: 1

      Believe what you will. I know it works for me. Opinions/beliefs to the contrary are irrelevant.

      Good luck with that. I'll remember that next time I get another "mortgage offer". It might work for you, but the truth is that the majority of spam is from Americans, for Americans and by Americans.

      Don't get me wrong, I'm not anti-American in general, but I hate getting vast amounts of spam for products that I will never buy because I'm in another country. If I blocked every national TLD except my own I would not receive ANY spam, so I see your point. But don't delude yourself about who profits from spam and who it's meant for.

    3. Re:Firewall the US by TFGeditor · · Score: 1

      Regardless of who spam is "from," it invariably is *sent* via spambots. And years of experience is that the majority of spam comes from compormised machines "overseas." The owner of the spamvertized website (which invariably are hosed in China, Russia, India, Mexico, et al) might in fact be American, but for my purposes that, too, is irrelevant.

      According to the Spamhaus Register of Known Spam Operations (ROKSO) database: "Many of these spam operations pretend to operate 'offshore' using servers in Asia and South America."

      Remember, too, that this conversation is about "*Russian* Phishers."

      --
      Ignorance is curable, stupid is forever.
  28. To Each His Own by andersh · · Score: 1

    And years of experience is that the majority of spam comes from compormised machines "overseas."

    Do you have any evidence or links that proves this? Because I would like to point out that the US has quite a large percentage of the worlds computers (and Microsoft Windows). China is obviously the biggest market for PCs nowadays, but they also prefer a cheap Linux OS.

    The owner of the spamvertized website ... might in fact be American, but for my purposes that, too, is irrelevant.

    Sure, I agree, the ownership is irrelevant for this discussion. But they're still the ones contracting the spam campaigns.

    "Many of these spam operations pretend to operate 'offshore' using servers in Asia and South America."

    And I should of course have said blocking all of the Americas would solve my problem. Russia and Asia are obviously on the hit list as well. My own country would be enough, just like you. See, I have full sympathy for your situation.

    Remember, too, that this conversation is about "*Russian* Phishers."

    And who do you think purchases spam advertising from these Russians? Not Russians for sure. The phishing activites are of course a different issue - but we ended up discussing spam...

    Of course there's probably a link between purchasing spam ad campaigns, "financing" their bot networks, and ultimately supporting their phishing activities.

    1. Re:To Each His Own by TFGeditor · · Score: 1

      "Of course there's probably a link between purchasing spam ad campaigns, "financing" their bot networks, and ultimately supporting their phishing activities."

      Quite correct. DDOS attacks are another element. Bot herders "rent" their botnets to literally anyone, including entities and individuals who wish to DDOS a competitor's or enemy's website, or for extortion schemes. ("Send money and the DDOS attack will stop.") Spammers et al also DDOS Spamhaus, Castle Cops, SpamCops, and other anti-spam/phishing organizations.

      Whoever said "crime doesn't pay" didn't know anything about crime--or botnets.

      --
      Ignorance is curable, stupid is forever.