back to article Online criminals iced as cops bury malware-spewing Avalanche

On November 30, simultaneous raids in five countries by the FBI, Europol, and the UK's National Crime Agency (NCA) finally shuttered the Avalanche criminal network that has been spewing malware and money laundering campaigns for the past seven years. The Avalanche network was a system of 600 servers around the world that were …

  1. Anonymous Coward
    Childcatcher

    Four letters in blue

    I think that this article might be an example of real policing in action. Two hyperlinks and minimal trumpet blowing implies to me that a few tax quids might be doing good stuff.

    Cheers

    Jon

    1. Mark 85

      Re: Four letters in blue

      And apparently they did it without needing an increase in their surveillance powers....

  2. Herby

    A plus for the operation. Spam volume down??

    Time will tell. I certainly hope so. My current count is over 300 messages per day, some that include "buddy" or other such words in their subject (usually with asterisks somewhere, most NSFW). Most I suspect want me to click on some nice link that has lots of javascript to do nasty stuff. Yuck!!

    Off with their heads (I wish!!).

  3. JJKing
    Thumb Up

    Now if they could just leave the poor motorist doing 5 or 6kph over the speed limit alone and do more actual crime fighting work like this then they may become more likeable again.

    Good job on this case Mr Plods.

    1. LaeMing
      Megaphone

      The "poor motorist" doing 5 or 6 kph over the speed limit is just as much a real criminal as these people. If you either can't control your vehicle or couldn't give a rat's arse about the lives and safety of others then get off the road. And ideally stop stealing oxygen while you are at it.

      1. Anonymous Coward
        Anonymous Coward

        I think that common sense needs to be applied when looking at over the speed limit cases. In built up areas the speed limit is the limit, no exceptions. Out on an open road with no other traffic about does a few kph over some arbitrary limit that has been set for roads with heavy traffic really matter?

      2. Paul 129

        The "poor motorist"

        The "poor motorist" doing 5 or 6 kph over the speed limit is just as much a real criminal as these people.

        Interesting, I'll challenge that assumption.

        One causes an obvious body count.

        The other, simply bankruptcy, destroyed businesses, loss of income to all their employees, probably suicides.

        One is unintentional, the other is not.

        People struggle to keep their businesses operational at the best of times. The internet has become a very hostile place, where one misconfiguration can give access, and most operators don't have our level of knowledge.

        As another poster points out common sense should be applied.

  4. M7S

    Re: the infected PCs still out there

    Are these the sort of things intended to be "liberated" under section 41?

    http://www.theregister.co.uk/2016/11/30/efforts_to_stop_rule_41_fail/

    If so, it might be the opportunity for a demonstration that this power is to be used for the public good.

    In your own time now...

    1. Crazy Operations Guy

      Re: the infected PCs still out there

      And this is why I would love to see, with proper oversight, some sort of Carrier-grade Network Access Protection system in place.

      Malware or attack traffic detected coming from your internet connection? Congratulations, you can now only browse to remediation servers...

  5. Anonymous Coward
    Anonymous Coward

    Question

    I have a client that I picked up after they got hit with ransomware.

    Accessible terminal services client, weak password, no backups = FACEPALM

    I managed, by luck, to get their important data back, but I also have logs, showing the remote connection ip address. The source address was in the Netherlands (GEOIP) we are in Austalia.

    Aus Federal Police, only seem to be interested kiddie porn complaints, or if the perpetrator is in Australia. IS there anyone who could make use of this information?????

    Yes you'd like to think that the perp is some mastermind that uses multiple proxies/infected victims, but surely there is something we can do? If only to make people aware they've been hit. Not go "oh its crossed a border, forget about it!"

    1. Mark 85

      Re: Question

      The police are all like that. There is one question.. the IP addy... from a proxy server? Or a bot? While it's a good starting point, going back further can be a problem.

  6. David Pollard

    Window of oppoertunity?

    ... computer users should use this window to install anti-virus software and make sure they're protected."

    Surely if you haven't got them in place then it's important to install AV measures as soon as possible whether or not there is a convenient window. The point is not so much that now is a convenient time as there is less activity at present but that the gangs will have re-formed and will be back in action very soon.

  7. whoseyourdaddy

    Apple should be given the reigns on Windows and Android software distribution.

    That'll solve waay too much of the DDOS and malware problems in the world.

    Don't agree?

    .

    .

    .

    Don't care.

    1. Tim Ryan

      Yeah just who is your daddy?

  8. TheGrateUnknown
    Thumb Up

    With some of our email addresses, we get over 200+ spam messages per day, other email addresses get none.

    The problem occurs when you create an account at a trader, and their system is already infected with data-harvesting software.

    Very frustrating and time wasting.

    we have found never to "bounce" spam, it only means more a'coming our way.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like