Microsoft Grabs No-IP.com Domains
Redmond rushes in to root out alleged malware haven.
In a dramatic move, Microsoft has obtained a court order to seize 22 domains from dynamic DNS provider No-IP.com because the domains were allegedly used by attackers to propagate the Bladabindi and Jenxcus malware tools. No-IP.com, one of the most popular dynamic DNS services, allows a customer to maintain a static DNS name even when using a dynamic IP address. Millions of customers use No-IP.com to maintain a permanent web presence while using an ordinary DHCP-based temporary IP address.
"Seizing" is an efficient business within the DNS system – all it really means is the authoritative name server for the domain was changed to a name server under Microsoft's control. Microsoft requested and received a court order for the action, accusing No-IP's owner Vitalwerks of providing a haven for malware criminals. Internet attackers like dynamic DNS services for the same reason other customers like them: They can hard code a permanent logical name into their intrusion scripts without revealing a permanent location associated with an IP address.
Microsoft accuses Vitalwerks of violating the Anticybersquatting Consumer Protection Act and other laws designed to combat the malware epidemic, stating that Vitalwerks and No-IP are not doing enough to prevent abuses. The Microsoft complaint states that No-IP “… functions as a major hub for 245 different types of malware circulating on the Internet.”
Vitalwerks expressed shock, stating that they have "a long history of proactively working with other companies when cases of alleged malicious activity is reported to us." Company officials said Microsoft didn't bother to reach out to them before moving to block the offending domains through a court order. The action was supposed to only affect a few targeted subdomains, but Vitalwerks says Microsoft's actions have interrupted service for millions of customers.
The implications for the dynamic DNS industry will depend on the details of the case. Is the whole concept of dynamic DNS risky by nature, or, as Microsoft alleges, did No-IP.com have a lackadaisical attitude toward preventing abuses? So far, neither the judge nor the many lawyers have addressed the irony of the world's leader in insecure, virus-laden software accusing another company of providing a safe environment for malware.
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Subscribe to our ADMIN Newsletters
Support Our Work
Linux Magazine content is made possible with support from readers like you. Please consider contributing when you’ve found an article to be beneficial.
News
-
So Long Neofetch and Thanks for the Info
Today is a day that every Linux user who enjoys bragging about their system(s) will mourn, as Neofetch has come to an end.
-
Ubuntu 24.04 Comes with a “Flaw"
If you're thinking you might want to upgrade from your current Ubuntu release to the latest, there's something you might want to consider before doing so.
-
Canonical Releases Ubuntu 24.04
After a brief pause because of the XZ vulnerability, Ubuntu 24.04 is now available for install.
-
Linux Servers Targeted by Akira Ransomware
A group of bad actors who have already extorted $42 million have their sights set on the Linux platform.
-
TUXEDO Computers Unveils Linux Laptop Featuring AMD Ryzen CPU
This latest release is the first laptop to include the new CPU from Ryzen and Linux preinstalled.
-
XZ Gets the All-Clear
The back door xz vulnerability has been officially reverted for Fedora 40 and versions 38 and 39 were never affected.
-
Canonical Collaborates with Qualcomm on New Venture
This new joint effort is geared toward bringing Ubuntu and Ubuntu Core to Qualcomm-powered devices.
-
Kodi 21.0 Open-Source Entertainment Hub Released
After a year of development, the award-winning Kodi cross-platform, media center software is now available with many new additions and improvements.
-
Linux Usage Increases in Two Key Areas
If market share is your thing, you'll be happy to know that Linux is on the rise in two areas that, if they keep climbing, could have serious meaning for Linux's future.
-
Vulnerability Discovered in xz Libraries
An urgent alert for Fedora 40 has been posted and users should pay attention.