In April, Group-IB sent 246 requests to the authorized registrars to delete the delegation of domain names due to various violations. Following these requests, 225 domain names have been deleted or blocked. Eight domain names were later unblocked at the request of CERT-GIB after their owners resolved their issues following a routine procedure.
The remaining 21 names were not blocked because their administrators quickly rectified the deficiencies or the domain had been blocked by the hosting provider. At this point, 217 domain names remain blocked and 29 have been delegated.
The largest group of violators was guilty of phishing (76 percent) and the remaining 24 percent of violations were due to malicious software. No botnet controllers were reported in April.
Group-IB exposes violators under an agreement with the Coordination Center for TLD RU on preventing the unauthorized use of .RU and .РФ domains. In particular, Group-IB is certified to prevent the misuse of domain names in .RU and .РФ domains such as phishing, illegal access to information systems, the spread of malware and the management of bot-infected computer networks.
More details on online reporting of cyber threats and other criminal activitiescan be found on the Coordination Center’s website.
