bodyType

customContents

entityId

entityUuid

articlePageQuery

filter

article

articleBaseAdvertisingInfoArticle

articleListArticle

articleSeoArticle

hooksArticleAcknowledgementGateOverlayArticle

hooksTrackPageViewArticle

hooksContentInterestArticle

articleLinkingDataContent

hooksAmpRedirectArticle

articleSchemaContent

liveArticle

advertZone

sentiment

contentLock

topics

types

sections

paywallTypes

createdDate

publishedDate

sponsorType

urlAlias

moreOnThisArticles

commentCount

authorLocations

authors

corrections

displaySlideShow

multimediaEmbed

printHeadline

seriesContainer

articleSpeeches

socialHeadline

headline

images

flag

firstTopic

glossary

flattenTypeIds

image

relatedLinks

relatedNewsletters

__typename

sponsor

pdfFiles

seriesReverseOrder

series

disableOffPlatformContent

published

updatedDate

summary

subHeadline

body

keywords

readingTime

customTimezone

liveContents

The Soviet Union disappeared from the map more than two decades ago, but online an 'e-vil empire' is thriving.
Security experts say the .su internet suffix assigned to the USSR in 1990 has become a haven for hackers who have flocked to the defunct superpower's domain space to send spam and steal money.
Capitalist concerns, rather than communist nostalgia, explain the move.
"I don't think that this is really a political thing," Oren David, a manager at security firm RSA's anti-fraud unit, said, adding that other obscure areas of the internet, such as the .tk domain associated with the South Pacific territory of Tokelau, have been used by opportunistic hackers.
"It's all about business," he said.
David and others say scammers began to move to .su after the administrators of Russia's .ru space toughened their rules in late 2011.
Group-IB, which runs one of Russia's two official internet watchdogs, says that the number of malicious websites hosted across the Soviet Union's old domain doubled in 2011 and doubled again in 2012, surpassing even the vast number of renegade sites on .ru and its newer Cyrillic-language counterpart.
	The Soviet domain has "lots of problems", Group-IB's Andrei Komarov said. "In my opinion more than half of cyber-criminals in Russia and former USSR use it."
The most notorious site was Exposed.su, which purportedly published credit records belonging to United States President Barack Obama's wife, Michelle,  Republican presidential challengers Mitt Romney and Donald Trump, and celebrities including Britney Spears, Jay Z, Beyonce and Tiger Woods. The site is now defunct.
Other Soviet sites are used to control botnets - the name given to the networks of hijacked computers used by criminals to empty bank accounts, deliver spam, or launch attacks against rival websites.
Internet hosting companies generally eliminate such sites as soon as they are identified. But Swiss security researcher Roman Huessy, whose abuse.ch blog tracks botnet control sites, said hackers based in Soviet cyberspace could operate with impunity for months at a time.
Asked for examples, he listed a series of sites involved in ransacking bank accounts or holding hard drives hostage in return for ransom - brazenly working in the online equivalent of broad daylight.
"I can continue posting this list for ages," he said via Skype.
The history of .su goes back to the early days of the internet, when its architects were creating the universe of country code suffixes meant to mark out a website's nationality. Each code - such as .fr for France or .ca for Canada - was meant to correspond to a country.
Some cold-war-era domain names - such as .yu for Yugoslavia or .dd for East Germany - evaporated after the countries behind them disappeared. However, .su survived the dissolution of the Soviet Union in 1991 and the creation of a .ru domain in 1994, resisting repeated attempts to wipe it from the Web because, unlike other defunct domains, those behind .su refused to pull the plug - on both commercial and patriotic grounds.
With more than 120,000 domains registered, mothballing .su now would be a messy operation.
"It's like blocking .com or .org," Komarov said. "Lots of legitimate domains are registered there."
Among them are stalin.su, which eulogises the dictator, and the English-language chronicle.su, an absurdist parody site.
But experts say many are fraudulent, and even the organisation behind .su accepts that.
"We realise it is a threat for our image," said Sergei Ovcharenko, whose Moscow-based non-profit Foundation for Internet Development took responsibility for .su in 2007.
Ovcharenko insisted that only a small number of .su sites were malicious, although he acknowledged that criminal sites could stay online for extremely long periods of time. He said his hands were tied by weak Russian legislation and outdated terms of service, but promised that stricter rules were on their way after months of legal work.
"We are almost there," he said. "This summer, we will be rolling out our new policy."
Meanwhile, .su has become increasingly notorious, an online echo of the "evil empire" tag assigned to the Soviet Union by United States president Ronald Reagan 30 years ago.
David said the emergence of a communist relic as a 21st century security threat was bizarre.
"I thought that the Berlin Wall and my grandma's borscht were the only remnants of the Soviet Union," he said. "I was wrong."
Associated Press


Why dating in Hong Kong is so hard and how people are spending thousands on agencies

2016 trends, from Pokemon Go to poke bowls, as looking back 10 years goes viral in 2026

HSBC suffers temporary system shutdown, stopping services in Hong Kong

China’s cloud giants race to support Moltbot, the ‘AI that actually does things’

Internet

Former USSR internet domain a haven for cyber-criminals

Illustration: Henry Wong

Internet watchdog Group-IB staff at work in Moscow. Photo: AP

Lifestyle

Tech

Former Soviet Union domain name has become a major haven for hackers and cyber-criminals


Security experts say the .su internet suffix assigned to the USSR in 1990 has become a haven for hackers who have flocked to the defunct superpower's domain space to send spam and steal money.


Former USSR internet domain a haven for cyber-criminals

.css-1c6uqr6{color:inherit;font-weight:inherit;font-size:inherit;font-family:inherit;line-height:inherit;overflow-wrap:break-word;}Former Soviet Union domain name has become a major haven for hackers and cyber-criminals

Former Soviet Union domain name has become a major haven for hackers and cyber-criminals