With technology advancing rapidly, strong security measures are now more important than ever. Cloud-based systems are the best choice for securing data and facilities in sensitive sectors like biotech. But, the benefits are applicable across many industries. Read on to learn about the transformative benefits of cloud-based security systems for companies. Scalability and flexibility Cloud-based […]
Members gather in Strasbourg for the second plenary session of November 2023, with the session expected to open on Monday with a debate on the International Day on the Rights of the Child, which is marked every year on 20 November.
The InterPlanetary File System (IPFS) is a content-addressed peer-to-peer file sharing network from Protocol Labs being exploited by cybercriminals to host phishing sites and other malicious content. Often associated with the web 3.0 movement, it allows its users to upload, share, and download files across a distributed worldwide network.
Gateways make IPFS accessible to the broader public, allowing pages powered by IPFS to be visited in traditional web browsers and shared with potential victims. Netcraft first detected cyber attacks using IPFS in 2016, and now detects and blocks hundreds of attacks using IPFS gateways every day.
This blog post describes what IPFS is and how it works, how and why it is used by cybercriminals, and what Netcraft is doing to block and disrupt attacks that leverage the IPFS network.
What is IPFS?
IPFS is a decentralized storage and delivery network technology. Unlike the traditional web, where most content is hosted on dedicated servers, IPFS is peer-to-peer, which means there is no single server providing each page. Instead, content is accessed via any peer (also known as a node) that has a copy of the content, with little distinction between servers and users.
The decentralized structure allows users to host or share content with increased availability and resilience. Filecoin, a cryptocurrency which builds upon IPFS to incentivize node operators to host content, is significantly cheaper than using cloud storage services like Amazon S3 at the time of writing. Eliminating the need for a single server also means content can be accessed from nodes hosted in a wide variety of locations in multiple jurisdictions—improving availability but making it more difficult to remove content.
How does IPFS manage content?
The traditional web is location-addressed: URLs, such as https://www.netcraft.com/, are used to access content from a specific location. IPFS is instead content-addressed. …
[Weekly Security News] Hacking and cooperation in cybersecurity [November 15 2023] 1. Boeing data published by Lockbit hacking gang Lockbit, a cybercrime gang,had obtained a tremendous amount of sensitive data from Boeing, one of the world’s largest defense and space contractors. This doesn’t pose a threat to aircraft of flight safety according to the company […]
Handling complex legal matters is always a juggling act. Between tracking countless documents, meeting relentless deadlines, and ensuring your team is aligned, it’s easy to feel like you’re in a never-ending circus. Now, imagine doing all this while also hopping between multiple tools for document sharing, deadline tracking, and team collaboration. Sound familiar? That’s why […]
The Age of Cyber Warfare; Are We Safe from Cyber Attack? Commencing with the Kosovo War in 1999, often regarded as one of the early instances of cyber warfare, we have witnessed significant developments. Operation Orchard in 2007(when the Israeli Air Force employed Trojan horses to neutralize Syria’s nuclear facilities), the Russia-Georgia war in […]
Black Friday draws large crowds of eager shoppers to retail stores seeking incredible deals and discounts. It kicks off the lucrative holiday shopping season, which, for many retailers, accounts for up to 20% of annual revenue. Black Friday also presents unique challenges, particularly in ensuring the safety of both customers and staff. Below, we’ll explore […]
Litigation management is a cornerstone for corporations navigating complex litigation, including contract disputes, regulatory compliance issues, multidistrict litigation (MDLs), class action law suits, and everything in between. These legal challenges often involve hundreds of plaintiffs, extensive evidence, including terabytes of electronically stored information (ESI), and layered legal arguments. Having an effective strategy provides a roadmap, […]
Given the global interest in artificial intelligence (AI), it comes as no surprise that cybercriminals are looking to exploit the media hype. 2023 has seen a rapid increase in AI-themed attacks, following the release of Large Language Model (LLM)-powered chatbot ChatGPT in late 2022 (which quickly became one of the fastest-growing consumer applications ever). One easy way to theme a website around AI is to use a domain name which highlights it, as a .ai domain does.
This blog takes a look at the popularity of the .ai domains in recent years and the malicious activity on them that Netcraft has detected and disrupted.
About the .ai TLD
.ai is the country code top-level domain (ccTLD) for the British Overseas Territory of Anguilla. Registrations for this ccTLD began in 1995, but these have accelerated rapidly due to the boom in AI and related industries. Related fees go to the treasury of the government of Anguilla who, according to a report in the New York Times, made $2.9 million in 2018 from .ai registrations.
The ccTLD is used by many legitimate businesses, including two of the biggest technology companies in the world. Google and Meta registered google.ai and facebook.ai in 2017, which redirect to websites promoting their work in the field of AI.
Since 2013, the number of .ai domains used by web servers has grown 12,523% from 913 to 115,245 domains. We can also see similar growth in IPs and Active sites, growing from 165 to 37,041 IPs and 647 to 112,600 Active Sites. We detected the first part of this massive growth in 2017, when the technology industry and the wider media first began to take notice of (and report on) the potential of AI.
[Weekly Security News] The Target and Areas of DDoS Attacks in modern society including war [November 08 2023] 1. KillNet group touts new feature-rich ‘DDoS-for-hire’ service KillNet launched a DDoS tool for rent and DDoS attacks are accessible to virtually anyone. Astonishingly, DDoS attacks can be carried out at low cost. The best form of […]