Pages

Sunday, October 30, 2011

Then: "co.cc", Now: "ce.ms"

Not all netizens were happy when Google decided to pull the plug on "co.cc" domains last June, but it's a resounding win for those in the security industry. It had to be done as cybercriminals are creating free domains with the "co.cc" extension by the bulk to house and distribute their nasty binaries and fake AV.

Late last week, our friends at Zscaler discovered that cyberciminals have now moved to hosting their wares on "ce.ms" domains (.ms being the top-level domain for Montserrat, an island in the West Indies). A simple Google search led me to several forums and personal blog posts as early as June of this year complaining about getting fake AVs from such sites, with the Zscaler discovery looking much more complex.

Of course, not all websites using free domains are malicious, but they are popular with those looking to infect your PC so please be careful if you see a suspicious looking URL combined with a free domain or you may end up with more than you bargained for.

Jovi Umawing

No comments:

Post a Comment