From the front, the domain name is its identity card in cyberspace. On the contrary, the domain name has become an important means for criminals to engage in illegal activities. Criminals are currently using false information, such as registration to collect a large number of domain names, the use of domain names to control zombie networks and phishing to engage in criminal activities. Another problem with domain abuse is that irresponsible registries are driven by pecuniary interests to give the green light to these illegal practices. The registration service is highly automated and the certification process is not perfect. These all give the criminals the opportunity.
The biggest problem is that the entire domain name registration system, as well as the WHOIS database with registrant information, is flawed, containing false information or even pure fabricated information. This kind of abuse is not deliberately designed, but it works in a way that allows criminals to be free to drill.
Currently spam-sending botnets, phishing, denial-of-service attacks are dependent on domain names, because domain names are relatively "stable" in the control of criminals. When they are activated, these attacks will look for new IP addresses. As a result, these attacks should be prevented from easily using IP addresses, and the future trend of curbing cybercrime is to set the server in more detail.
A report published in May highly focused on the role of domain names in phishing crimes. The report said the criminals used 30,454 domain names in the second half of 2008 to launch 56,959 fishing attacks. Of these figures, 5591 fishing attacks were identified. These malicious domain names account for 18.5% of the domain names involved in phishing attacks. The rest of the domain name belongs to the innocent website owner, these domain names encountered the hacker's theft. Phishing attacks based on unique IP addresses have been steadily declining relative to domain phishing attacks, from 6336 in the first half of 2007 to 2809 in the second half of 2008.
The criminal activity of domain name abuse has now aroused the high concern of ICANN. These criminal activities have threatened the entire system. ICANN acknowledges that domain names have been abused by criminals and is perfecting the rules. There is still a lot of uncertainty about ICANN's power in this area, it's just a non-profit organization with no management and enforcement power. All this makes the problem seem very passive.
Today's domain name has become a criminal tool for cyber criminals. But one of the goals of the DNS community is to take these criminal tools away from the criminals ' toolbox.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.