It’s necessary to say that the aforementioned malware has been used by multiple cybercriminal and activist groups to target users, including the notorious Syrian Electronic Army. A multitude of earlier reports pointed out No-IP domain abuse, but apparently No-IP did little about it. So Microsoft moved in hard.
1) Shutting down 22 No-IP domains affected the operations of around 25% of the targeted attacks that we keep track of here at KL. That’s thousands of spy and cybercriminal operations ongoing for the last three years. Approximately a quarter of those have at least one command and control center (C&C) with this host. For example, hacker groups like the Syrian Electronic Army and Gaza Team use only No-IP, while Turla uses it for 90% of its hosts.
2) We can confirm that out of all large providers the No-IP dynamic DNS was the most unwilling to cooperate. For example, they ignored all our emails about a botnet sinkhole.
3) Our analysis of current malware shows that No-IP is often used by the cyberswine for botnet control centers. A simple search via the Virustotal scanning engine confirms this fact with a cold hard figure: a total of 4.5 million unique malware samples sprout from No-IP.
[^] # Re: Vive la démocratie d'Internet !
Posté par pasBill pasGates . En réponse au journal Microsoft débranche 22 domaines No-IP. Évalué à -3.
Le blog decrit tres clairement le probleme. Le probleme est toujours le meme, il leur faut quoi ? Un paquet cadeau ?
http://business.kaspersky.com/gone-fubar-microsoft-nukes-no-ip-gets-fallout/
http://eugene.kaspersky.com/2014/07/03/microsoft-takedown-no-ip-dynamic-dns-domain/