NSTIC

MAY 13, 2021

In the NIST Information Technology Laboratory (ITL), we have continued our international engagement in new and creative ways, leading to more robust and meaningful discussions with our stakeholders. A lot has changed for all of us over the last year as the result of the pandemic.

Cybersecurity 58

Cybersecurity Technology 58

Security Affairs

AUGUST 6, 2021

ITL Bulgaria [link]. If you want to extend your blocking further, look at the BGP AS associated to these subnets; and subsequently, check the prefixes listed for associated subnets. Data Room [link]. PlusServer [link]. BelCloud [link]. Looking at their infrastructures, other story?

Ransomware 107

Ransomware DNS Malware Hacking 107

Security Affairs

NOVEMBER 21, 2021

The latter is an IP address owned by Ukrainian web hosting company ITL LLC. The researchers were able to unmask the real IP address of Conti’s TOR hidden service and contirecovery.ws and 217.12.204.135.

Ransomware 93

Ransomware Retail Data breaches Hacking 93

Security Affairs

MAY 29, 2019

The client establishes a new connection with the remote command and control server hosted on a Bulgarian remote host 217.12.201.159, part of a Virtual Dedicated Server subnet of the AS-21100, operated by ITL LLC. C2’s parameters. The attack is composed by a complex flow we synthesize in the following scheme: Figure 12. The TA505 Connection.

Retail 71

Retail Banking Advertising Encryption 71