Vulnerabilities / Threats
6/21/2010
04:20 PM
Connect Directly
LinkedIn
Twitter
Google+
RSS
E-Mail
50%
50%

Internet Registrars Accused Of Supporting Online Criminals

A report issued on Monday claims Internet Registrars are knowingly facilitating illegal activity online.

Even as ICANN CEO Rod Beckstrom on Monday called for greater international cooperation to secure the Internet's Domain Name System, a report issued by an independent security research group claims that ICANN-accredited Internet Registrars are violating their contracts with ICANN to support online criminals.

The Internet Corporation for Assigned Numbers and Names accredits Internet Registrars under specific contractual terms. Accredited Registrars in turn may sell domain names to companies and individuals.

The report published on Monday by KnujOn, which identifies itself as an independent Internet policy and security research group located in Boston and Vermont, claims that 162 of Internet Registrars may be violating their agreements with ICANN and that 80 of them are blocking access to WHOIS data about their customers.

The report singles out eNom, one of the largest sellers of Web addresses, for knowingly facilitating traffic in illegal pharmaceuticals online.

Online pharmacies have long been a source of contention and risk because so many of them are unlicensed. In 2007, the FDA warned that "a number of Americans who placed orders for specific drug products over the Internet (Ambien, Xanax, Lexapro, and Ativan), instead received a product that, according to preliminary analysis, contains haloperidol, a powerful anti-psychotic drug."

Earlier this month, the FDA warned that H1N1 flu virus-related products sold through an online Web site were not approved flu medicines.

Last summer, trademark monitoring firm MarkMonitor estimated that online pharmacies had generated $11 billion in sales in 2009, up from an estimated $4 billion in 2007.

The growing trade in online pharmaceuticals is made possible by Internet Registrars, which provide back-end services that allow online pharmacies to operate, the report says. Yet, Internet Registrars such as eNom have been slow to take action against Web sites that prompt complaints, the report claims.

"Whether actively or ignorantly involved, there is no question that eNom has become an arm of illicit international drug traffic, a resource modern organized crime cannot exist without," the report states.

Demand Media, the parent company of eNom, disputes the report's claim that it fails to act against Web sites that violate the law.

"eNom is the largest domain name wholesaler and we take this responsibility very seriously," said Demand Media SVP of corporate communications Quinn Daly in an e-mail. "We cooperate with multiple law enforcement agencies, as this is our policy and meets ICANN requirements. Customers suspected of using eNom products and services for illegal purposes are investigated and appropriate action is taken."

Daly, who referred to KnujOn as "an individual whose research has been called into question in the past," confirmed that eNom had received a complaint from KnujOn and LegitScript, a pharmacy trade organization, and that the complaint is being reviewed.

KnujOn identifies Garth Bruen and Robert Bruen as principals in the organization. The group publishing its report in conjunction with the start of ICANN's 38th international meeting in Brussels, Belgium in the hope of encouraging ICANN to tighten its rules for dealing with Internet Registrars and online pharmacies.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-6651
Published: 2014-07-31
Multiple directory traversal vulnerabilities in the Vitamin plugin before 1.1.0 for WordPress allow remote attackers to access arbitrary files via a .. (dot dot) in the path parameter to (1) add_headers.php or (2) minify.php.

CVE-2014-2970
Published: 2014-07-31
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-5139. Reason: This candidate is a duplicate of CVE-2014-5139, and has also been used to refer to an unrelated topic that is currently outside the scope of CVE. This unrelated topic is a LibreSSL code change adding functionality ...

CVE-2014-3488
Published: 2014-07-31
The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.

CVE-2014-3554
Published: 2014-07-31
Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS Search List (DNSSL) in an IPv6 router advertisement.

CVE-2014-5171
Published: 2014-07-31
SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network.

Best of the Web
Dark Reading Radio