Interpol and Security Firms Identify 8800 C2 Servers in Southeast Asia

Interpol, in conjunction with security companies, has identified a total of 8,800 command and control servers in Southeast Asia in a joint operation. In addition, the organizations found 270 malware-infected websites.

According to Interpol, the websites included government portals that gave access to personal data. The various c2 servers are used to run malware variants targeting financial institutions or distributing ransomware and facilitating ddos ​​attacks. Interpol does not report what action has been taken after identifying the servers, but only writes that an investigation into the servers is taking place.

The c2 servers are spread over eight different countries in the region. The campaign involved researchers from Indonesia, Malaysia, Myanmar, Philippines, Singapore, Thailand and Vietnam. The Chinese government is also said to have supported the action. Other results of the investigation included the identification of phishing websites and of a criminal in Indonesia who sold ready-made ‘phishing kits’ with YouTube tutorials.

Interpol conducts more investigations into internet crime. Last year, the service managed to arrest the Nigerian top man of an international fraud network. In 2012, the arrest of 25 alleged Anonymous hackers took place.