netscout – PossibleThreat Articles

Infrastructure Laundering: Blending in with the Cloud

January 30, 2025 0 Comments A Little Sunshine, acb group, amazon aws, anjie cdn, crowell & moring llp, fangneng cdn, funnull, infrastructure laundering, Microsoft Azure, Ne'er-Do-Well News, netscout, noname057(16), polyfill, richard hummel, silent push, suncity group, Time to Patch, u.s. department of commerce, Web Fraud 2.0, zach edwards

Credit to Author: BrianKrebs| Date: Thu, 30 Jan 2025 17:10:08 +0000

In an effort to blend in and make their malicious traffic tougher to block, hosting firms catering to cybercriminals in China and Russia increasingly are funneling their operations through major U.S. cloud providers. Research published this week on one such outfit — a sprawling network tied to Chinese organized crime gangs and aptly named “Funnull” — highlights a persistent whac-a-mole problem facing cloud services.

Independent Krebs Security

Stark Industries Solutions: An Iron Hammer in the Cloud

May 23, 2024 0 Comments A Little Sunshine, andrey nesterenko, arbor, as44477, blue charlie, Breadcrumbs, callisto group, coldriver, comcast cable communications, computer technologies institute ltd, constella intelligence, correctiv.org, DDoS-for-hire, ddosia, dfyz, dfyz_bk@bk.ru, don chicho, egihosting, eset, federal state autonomous educational establishment of additional professional education center of realization of state educational policy and informational technologies, green floid llc, information technology laboratories group, innovation it solutions corp, integrated technologies laboratory, intel 471, internet research agency, itl llc, jeffrey carr, lockbit, max tulyev, mercenaries team, mirhosting, netassist, netscout, noname057(16), perfect quality hosting, pq hosting plus s.r.l., prolocation, proxyline, raymond dijkxhoorn, recorded future, richard hummel, russia's war on ukraine, seaborgium, serverius-as, spamhaus, stark industries solutions, surbl, team cymru, ukrinform

Credit to Author: BrianKrebs| Date: Thu, 23 May 2024 23:32:43 +0000

Two weeks before Russia invaded Ukraine in February 2022, a large, mysterious new Internet hosting firm called Stark Industries Solutions materialized and quickly became the epicenter of massive distributed denial-of-service (DDoS) attacks on government and commercial targets in Ukraine and Europe. An investigation into Stark Industries reveals it is being used as a global proxy network that conceals the true source of cyberattacks and disinformation campaigns against enemies of Russia.