Vulnerabilities / Threats
6/21/2010
04:20 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Internet Registrars Accused Of Supporting Online Criminals

A report issued on Monday claims Internet Registrars are knowingly facilitating illegal activity online.

Even as ICANN CEO Rod Beckstrom on Monday called for greater international cooperation to secure the Internet's Domain Name System, a report issued by an independent security research group claims that ICANN-accredited Internet Registrars are violating their contracts with ICANN to support online criminals.

The Internet Corporation for Assigned Numbers and Names accredits Internet Registrars under specific contractual terms. Accredited Registrars in turn may sell domain names to companies and individuals.

The report published on Monday by KnujOn, which identifies itself as an independent Internet policy and security research group located in Boston and Vermont, claims that 162 of Internet Registrars may be violating their agreements with ICANN and that 80 of them are blocking access to WHOIS data about their customers.

The report singles out eNom, one of the largest sellers of Web addresses, for knowingly facilitating traffic in illegal pharmaceuticals online.

Online pharmacies have long been a source of contention and risk because so many of them are unlicensed. In 2007, the FDA warned that "a number of Americans who placed orders for specific drug products over the Internet (Ambien, Xanax, Lexapro, and Ativan), instead received a product that, according to preliminary analysis, contains haloperidol, a powerful anti-psychotic drug."

Earlier this month, the FDA warned that H1N1 flu virus-related products sold through an online Web site were not approved flu medicines.

Last summer, trademark monitoring firm MarkMonitor estimated that online pharmacies had generated $11 billion in sales in 2009, up from an estimated $4 billion in 2007.

The growing trade in online pharmaceuticals is made possible by Internet Registrars, which provide back-end services that allow online pharmacies to operate, the report says. Yet, Internet Registrars such as eNom have been slow to take action against Web sites that prompt complaints, the report claims.

"Whether actively or ignorantly involved, there is no question that eNom has become an arm of illicit international drug traffic, a resource modern organized crime cannot exist without," the report states.

Demand Media, the parent company of eNom, disputes the report's claim that it fails to act against Web sites that violate the law.

"eNom is the largest domain name wholesaler and we take this responsibility very seriously," said Demand Media SVP of corporate communications Quinn Daly in an e-mail. "We cooperate with multiple law enforcement agencies, as this is our policy and meets ICANN requirements. Customers suspected of using eNom products and services for illegal purposes are investigated and appropriate action is taken."

Daly, who referred to KnujOn as "an individual whose research has been called into question in the past," confirmed that eNom had received a complaint from KnujOn and LegitScript, a pharmacy trade organization, and that the complaint is being reviewed.

KnujOn identifies Garth Bruen and Robert Bruen as principals in the organization. The group publishing its report in conjunction with the start of ICANN's 38th international meeting in Brussels, Belgium in the hope of encouraging ICANN to tighten its rules for dealing with Internet Registrars and online pharmacies.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-9688
Published: 2015-03-05
Unspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown impact and remote attack vectors related to admin users.

CVE-2015-2214
Published: 2015-03-05
NetCat 5.01 and earlier allows remote attackers to obtain the installation path via the redirect_url parameter to netshop/post.php.

CVE-2015-2215
Published: 2015-03-05
Open redirect vulnerability in the Services single sign-on server helper (services_sso_server_helper) module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters.

CVE-2015-2216
Published: 2015-03-05
SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prod_id parameter.

CVE-2015-2218
Published: 2015-03-05
Multiple cross-site scripting (XSS) vulnerabilities in the wp_ajax_save_item function in wonderpluginaudio.php in the WonderPlugin Audio Player plugin before 2.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) item[name] or (2) item[customcss] parameter in a w...

Dark Reading Radio
Archived Dark Reading Radio
How can security professionals better engage with their peers, both in person and online? In this Dark Reading Radio show, we will talk to leaders at some of the security industry’s professional organizations about how security pros can get more involved – with their colleagues in the same industry, with their peers in other industries, and with the IT security community as a whole.