Threat Level: green Handler on Duty: Yee Ching Tok

SANS ISC: Websense Study Claims Canada Next Hotbed for Cybercrime Web Hosting Activity SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Websense Study Claims Canada Next Hotbed for Cybercrime Web Hosting Activity

According to Websense, Canada has been seen as a prime target to move cybercrime operations into their network infrastructure. Here is a summary of Patrik Runald's blog and the complete post can be found here.

Jump in Hosted Phishing Sites - A 319% increase in the last year. The various site locations are shown here.
Increase in Bot Networks – Over the past 8 months, a 53% increase of bot Command and Control (C&C). When compared to the U.S., France, Germany and China, Canada is now 2nd for hosting bot networks.
Malicious Websites - Websense noticed a decline of malicious website, however, this decline is moving at a much slower pace in Canada
Overall Increase in Cybercrime - In the 2010 Websense Threat Report, Canada was #13 and is now #6 in 2011.

Have you noticed an increase in cybercrime activity from web servers hosted in Canada?



Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu


502 Posts
ISC Handler
May 14th 2011
Could this have anything with blocking access to my server from Europe. (All other access also appears to be blocked.) Staring about the time this posting came out my network block started being routed to [] and no further. Attempts to contact both and my ISP have been unsuccessful.

3 Posts
I am happy to report the problem has been traced to a broken line drop. Timing was co-incidental with the posting. It appears my ISP entirely stopped routing my netblock when the connection went down. being the next hop back was the last reachable address. I will be following up when I return from Europe.

3 Posts

Sign Up for Free or Log In to start participating in the conversation!