Business as usual for ISPs during 'internet blackout'

Powered by SC Magazine
 

Infected boxes remain online.

The mainstream media's DNSChanger internet doomsday arrived without fanfare, as the FBI pulled the plug on servers that allowed thousands of computers in Australia to access the web.

Security firm F-Secure confirmed early Monday that the temporary servers, which replaced the rogue servers that had been operated by a now-dismantled fraud syndicate spreading the DNSChanger trojan, went offline, as expected.

Yet, despite the media hype that some 6000 computers in Australia, 60,000 machines in the US and a couple of hundred thousand elsewhere in the world remained infected and could lose internet connectivity -- creating a Y2K-style scenario -- the resulting scene has been calm.

Australia's second-largest ADSL provider iiNet found no increase in customer requests for assistance in cleansing DNSChanger infections.

The lions' share of infected machines within Australia resided under Telstra within an Autonomous System Network (ASN), according to the DNSChanger Working Group. The network yesterday contained 4383 infected machines.

Telstra, which redirected infected customers so they would not lose internet connectivity, said it had at least 2500 Telstra affected endpoints.

"According to reports, many major internet service providers have configured their own substitute DNS servers and are continuing to work the problem," wrote Sean Sullivan, a security adviser at F-Secure, in a blog post.

"So, the FBI is out, and ISPs are in. All in all, things are working out as they probably should in a case such as this. The infection count continues to decrease without a major crisis in support calls. We've only received a couple from our own customers."

According to F-Secure, the number of infected IP addresses now sits at around 47,000 in the United States -- though many of those machines may not even be actively used to access the internet.

Major ISP Comcast has received a "miniscule" number of help-related calls since midnight, according to company spokesman Charlie Douglas. And like other ISPs, Comcast is standing by and ready to assist any customers, he said.

The SANS Internet Storm Center's Johannes Ullrich further downplayed the hype and suggested users who haven't cleaned their systems by now probably deserve the consequences.

As recently as last fall, an estimated half-million computers in the United States and several million across the world contained the DNSChanger trojan.

"There are about (two billion) internet users," he wrote. "So about 0.01 (percent) of internet users are infected. In other words: Very few. People who have disregarded warning banners, phone calls from ISPs, (anti-virus) warnings, and other notification attempts -- they probably should be disconnected from the internet."

-With Darren Pauli

Copyright © SC Magazine, US edition


 
 
 
Top Stories
IBM denies plans to cut 112k jobs
But admits to further restructuring.
 
ATO investigates 25 tech giants in tax hunt
Prepared to take tax evaders to court.
 
Immigration, Customs restructure IT leadership
Customs CIO promoted into transformation role.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
Franchisees, here's something you should know about
Jan 23, 2015
You need to know the Code if you are a franchisee or franchisor as the penalties are significant.
Xero users rejoice! Quoting has finally arrived
Jan 23, 2015
It has taken years, but Xero has at last added integrated quoting to its online accounting software.
You can now get a no-contract wi-fi tablet from Telstra
Jan 17, 2015
Telstra has began selling wi-fi tablets out of contract without paying extra for cellular ...
Get your business ready for 2015: mobile payments
Jan 2, 2015
These handy apps from MYOB, Xero and others can reduce your administrative load and improve ...
Xero prepares for key feature coming in 2015
Dec 19, 2014
Xero users will be able to track how their business is comparing to other Xero users.
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  36%
 
Your insurance company
  5%
 
A technology company (Google, Facebook et al)
  9%
 
Your telco, ISP or utility
  8%
 
A retailer (Coles, Woolworths et al)
  4%
 
A Federal Government agency (ATO, Centrelink etc)
  18%
 
An Australian law enforcement agency (AFP, ASIO et al)
  14%
 
A State Government agency (Health dept, etc)
  7%
TOTAL VOTES: 2987

Vote
Do you support the abolition of the Office of the Information Commissioner?

   |   View results
I support shutting down the OAIC.
  27%
 
I DON'T support shutting the OAIC.
  73%
TOTAL VOTES: 946

Vote