Vulnerabilities / Threats
6/21/2010
04:20 PM
Connect Directly
LinkedIn
Twitter
Google+
RSS
E-Mail
50%
50%

Internet Registrars Accused Of Supporting Online Criminals

A report issued on Monday claims Internet Registrars are knowingly facilitating illegal activity online.

Even as ICANN CEO Rod Beckstrom on Monday called for greater international cooperation to secure the Internet's Domain Name System, a report issued by an independent security research group claims that ICANN-accredited Internet Registrars are violating their contracts with ICANN to support online criminals.

The Internet Corporation for Assigned Numbers and Names accredits Internet Registrars under specific contractual terms. Accredited Registrars in turn may sell domain names to companies and individuals.

The report published on Monday by KnujOn, which identifies itself as an independent Internet policy and security research group located in Boston and Vermont, claims that 162 of Internet Registrars may be violating their agreements with ICANN and that 80 of them are blocking access to WHOIS data about their customers.

The report singles out eNom, one of the largest sellers of Web addresses, for knowingly facilitating traffic in illegal pharmaceuticals online.

Online pharmacies have long been a source of contention and risk because so many of them are unlicensed. In 2007, the FDA warned that "a number of Americans who placed orders for specific drug products over the Internet (Ambien, Xanax, Lexapro, and Ativan), instead received a product that, according to preliminary analysis, contains haloperidol, a powerful anti-psychotic drug."

Earlier this month, the FDA warned that H1N1 flu virus-related products sold through an online Web site were not approved flu medicines.

Last summer, trademark monitoring firm MarkMonitor estimated that online pharmacies had generated $11 billion in sales in 2009, up from an estimated $4 billion in 2007.

The growing trade in online pharmaceuticals is made possible by Internet Registrars, which provide back-end services that allow online pharmacies to operate, the report says. Yet, Internet Registrars such as eNom have been slow to take action against Web sites that prompt complaints, the report claims.

"Whether actively or ignorantly involved, there is no question that eNom has become an arm of illicit international drug traffic, a resource modern organized crime cannot exist without," the report states.

Demand Media, the parent company of eNom, disputes the report's claim that it fails to act against Web sites that violate the law.

"eNom is the largest domain name wholesaler and we take this responsibility very seriously," said Demand Media SVP of corporate communications Quinn Daly in an e-mail. "We cooperate with multiple law enforcement agencies, as this is our policy and meets ICANN requirements. Customers suspected of using eNom products and services for illegal purposes are investigated and appropriate action is taken."

Daly, who referred to KnujOn as "an individual whose research has been called into question in the past," confirmed that eNom had received a complaint from KnujOn and LegitScript, a pharmacy trade organization, and that the complaint is being reviewed.

KnujOn identifies Garth Bruen and Robert Bruen as principals in the organization. The group publishing its report in conjunction with the start of ICANN's 38th international meeting in Brussels, Belgium in the hope of encouraging ICANN to tighten its rules for dealing with Internet Registrars and online pharmacies.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
Partner Perspectives
What's This?
In a digital world inundated with advanced security threats, Intel Security seeks to transform how we live and work to keep our information secure. Through hardware and software development, Intel Security delivers robust solutions that integrate security into every layer of every digital device. In combining the security expertise of McAfee with the innovation, performance, and trust of Intel, this vision becomes a reality.

As we rely on technology to enhance our everyday and business life, we must too consider the security of the intellectual property and confidential data that is housed on these devices. As we increase the number of devices we use, we increase the number of gateways and opportunity for security threats. Intel Security takes the “security connected” approach to ensure that every device is secure, and that all security solutions are seamlessly integrated.
Featured Writers
White Papers
Cartoon
Current Issue
Dark Reading's October Tech Digest
Fast data analysis can stymie attacks and strengthen enterprise security. Does your team have the data smarts?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-4884
Published: 2014-10-21
The Conrad Hotel (aka com.wConradHotel) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVE-2014-4885
Published: 2014-10-21
The CPWORLD Close Protection World (aka com.tapatalk.closeprotectionworldcom) application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVE-2014-4887
Published: 2014-10-21
The Joint Radio Blues (aka com.nobexinc.wls_69685189.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVE-2014-4888
Published: 2014-10-21
The BattleFriends at Sea GOLD (aka com.tequilamobile.warshipslivegold) application 1.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVE-2014-4889
Published: 2014-10-21
The Diabetic Diet Guide (aka com.wDiabeticDietGuide) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Follow Dark Reading editors into the field as they talk with noted experts from the security world.