Feeds

MP3sparks.com downed by links to Russian cybercrime gang

iTuneski jumps in bed with spammy host

Beginner's guide to SSL certificates

Exclusive The popular Russian digital music retailer MP3sparks.com has scored an own goal by doing business with a web host that has been linked to an infamous cybercrime syndicate. Many UK users have been frozen out of the site as a result.

Access to the site for customers of major UK ISPs including Virgin Media, Plusnet and Zen has been difficult since it switched web host on 28 December. All the ISPs are members of LINX, an exchange that connects them to the wider internet.

A section of internet backbone, owned by US-held Tier 1 provider Cogent, has been identified as the source of the block. The firm was unavailable for comment today, but a UK representative said our request for details on the embargo would be passed to executives.

A spokesman for Plusnet confirmed that Cogent applies an across-the-board ban on traffic from MP3sparks' new web host, AbdAllah Internet ("AbdAllah" hereafter). Plusnet rerouted its traffic last night so customers can access MP3sparks.

The development raises new questions about the integrity of the MP3sparks operation, which is no stranger to controversy.

AbdAllah is a shadowy Turkish outfit that has been repeatedly blacklisted for providing sanctuary to malware, fraud and phishing sites, and spam. It also has strong links with the Russian Business Network, a notorious group known for pumping the internet with child pornography and denial of service attacks, as well as malware, on behalf of anyone that will pay.

Security firms including Verisign and Symantec have slammed their criminal activities.

The Russian Business Network empire was highlighted by a Washington Post report in October last year.

In response to the exposé, the St Petersberg incarnation of the Russian Business Network was cut off the internet by its ISP C41, but security watchers noted that new tentacles were emerging in Taiwan and Turkey.

A traceroute on the MP3sparks domain reveals Turkish telco TurkTelekom as the "last hop". It acts as AbdAllah's primary upstream link to the internet, as C41 did for the original Russian Business Network servers.

Leading spam tracker Spamhaus has traced the links between AbdAllah and Russian cyber criminals. This entry in Spamhaus' Register Of Known Spam Operations database plots the evidence tieing AbdAllah to a drug spamming scam run by Leo Kuvayev, AKA Alex Rodriguez. Kuvayev is Spamhaus' public enemy number one.

However close or distant the relationship with the Russian gangs, Cogent and other carriers have judged that they should block AbdAllah traffic, even if it includes a popular music retailer.

Choosing a cloud hosting partner with confidence

More from The Register

next story
Facebook, Apple: LADIES! Why not FREEZE your EGGS? It's on the company!
No biological clockwatching when you work in Silicon Valley
Lords take revenge on REVENGE PORN publishers
Jilted Johns and Jennies with busy fingers face two years inside
Yes, yes, Steve Jobs. Look what I'VE done for you lately – Tim Cook
New iPhone biz baron points to Apple's (his) greatest successes
Happiness economics is bollocks. Oh, UK.gov just adopted it? Er ...
Opportunity doesn't knock; it costs us instead
Ex-US Navy fighter pilot MIT prof: Drones beat humans - I should know
'Missy' Cummings on UAVs, smartcars and dying from boredom
Facebook pays INFINITELY MORE UK corp tax than in 2012
Thanks for the £3k, Zuck. Doh! you're IN CREDIT. Guess not
Sysadmin with EBOLA? Gartner's issued advice to debug your biz
Start hoarding cleaning supplies, analyst firm says, and assume your team will scatter
Edward who? GCHQ boss dodges Snowden topic during last speech
UK spies would rather 'walk' than do 'mass surveillance'
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.