In February 2014, Group-IB, a leading Russian company in the incident response business, sent 86 notifications to authorized registrars regarding the removal of 62 domain names from delegation. Of the 24 domain names that remain delegated, nine were not blocked because their administrators promptly removed the shortcomings. Fourteen domain names were unblocked after their owners used the approved procedure to correct their shortcomings. They were unblocked upon application from CERT-GIB, the Computer Security Incident Response Team of Group-IB.
The majority of domain violators hosted malware (81%), while 8% were recognized as botnet command and control servers.
Group-IB partners search for and detect malicious domains under an agreement with the Coordination Center to combat malicious activities in .RU and .РФ Russian domains. Group-IB's competencies include tackling criminal activities in Russian domains .RU and .РФ, such as phishing, unauthorized access, spreading malware and controlling botnets.
For detailed information on how to report cyber threats and other malicious activities, see the Coordination Center’s website.
