Feeds

WikiLeaks urged to stop hosting on Russian blackhat ISP

Virtual mafia state, indeed

Beginner's guide to SSL certificates

Security watchers have urged Wikileaks to stop hosting its material with a "bulletproof" Russian ISP believed to primarily cater to, or be controlled by, Russian cyber criminals.

Wikileaks.org now points to a mirror of the site, mirror.wikileaks.info, hosted by Webalta, a blackhat ISP linked to a company called Heihachi Ltd, according to Spamhaus. The .org URL has been WikiLeaks' main web address since its launch in 2006.

"Spamhaus regards the Russian Webalta (also known as Wahome) host as being "blackhat" - a known cybercrime host from whose IP space Spamhaus only sees spamming, malware/virus hosting, phishing and other cybercriminal activities," the anti-spam organisation said on Tuesday evening.

The warning follows similar concerns raised by Trend Micro, which also runs a spam-blocking list.

Both firms said that whatever political view one takes of the ongoing WikiLeaks saga, the site's administrators should take more care over the company it keeps.

Ironically, the judgment of an investigator that Vladimir Putin's Russia is a "virtual mafia state" has been one of the highest-profile disclosures from the US embassy cables so far released by Wikileaks.

"The fact that recently some unknown person or persons decided to put a Wikileaks mirror on IP address 92.241.190.202 should raise an alarm; how was it placed there and by whom," said Spamhaus.

"Our concern is that any Wikileaks archive posted on a site that is hosted in Webalta space might be infected with malware... Spamhaus takes no political stand on the Wikileaks affair."

Trend Micro said: "We don't know whether wikileaks.org has perhaps been compromised or whether WikiLeaks is knowingly getting services from a blackhat provider.

"To give you an idea, here are some illustrious neighbors: paypal-securitycenter.com, carders.kz, idchecking.ir (phishing), and postbank-sicherung.com."

The wikileaks.org domain was offline for a week after the plug was pulled by its DNS provider EVERYdns.net. It reappeared on Friday after being registered with another US DNS outfit, Dynadot. ®

Protecting against web application threats using SSL

More from The Register

next story
Hey, Scots. Microsoft's Bing thinks you'll vote NO to independence
World's top Google-finding website calls it for the UK
Phones 4u slips into administration after EE cuts ties with Brit mobe retailer
More than 5,500 jobs could be axed if rescue mission fails
Apple CEO Tim Cook: TV is TERRIBLE and stuck in the 1970s
The iKing thinks telly is far too fiddly and ugly – basically, iTunes
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
Huawei ditches new Windows Phone mobe plans, blames poor sales
Giganto mobe firm slams door shut on Microsoft. OH DEAR
Phones 4u website DIES as wounded mobe retailer struggles to stay above water
Founder blames 'ruthless network partners' for implosion
Found inside ISIS terror chap's laptop: CELINE DION tunes
REPORT: Stash of terrorist material found in Syria Dell box
OECD lashes out at tax avoiding globocorps' location-flipping antics
You hear that, Amazon, Google, Microsoft et al?
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.