Countless malware threats that have previously been contained are at risk of being released into the wild again.<\/p>\n
This is because the world’s largest non-profit cybersecurity organisation, Shadowserver, is at risk of shutting down.<\/p>\n
Shadowserver has historically aided federal law enforcement institutions, including the FBI, in \u201csinkholing\u201d domain names which are used by extensive malware operations.<\/p>\n
\u201cSinkholing\u201d refers to the redirection of malicious Internet traffic so that law enforcement officials and other experts can capture and analyse this traffic.<\/p>\n
This often also results in legal action being taken against those running these malware operations to ensure they lose power over their maliciously-used resources.<\/p>\n
Shadowserver has published a statement<\/strong><\/a> stating that it is desperate for financial assistance from donors.<\/p>\n This is because Cisco recently informed Shadowserver that it would no longer provide support to the organisation.<\/p>\n Cisco has been the primary funding source of Shadowserver for over 15 years, and its withdrawal leaves Shadowserver at risk of being unable to continue operating.<\/p>\n \u201cConsequently, Shadowserver unexpectedly lost seven donated-in US technical staff at short notice, and now has to move its entire US data centre (104 racks, 1,340 servers, ~12 petabytes of storage) somewhere else before 26 May 2020 to keep operating,\u201d said Shadowserver.<\/p>\n It added that it does not have the appropriate cash reserves available to cover the situation, and will therefore require financial support from its community if it is to continue.<\/p>\n To continuing operating, Shadowserver needs $400,000 in commitments by 31 March, while these commitments will need to be paid by 15 May.<\/p>\n In total, however, Shadowserver will have $2.1 million in total 2020 costs.<\/p>\n \u201cWe know that this unexpected news and the externally enforced timeline for finding a solution will be a shock to everyone,\u201d said Shadowserver.<\/p>\n \u201cAt this time of global uncertainty and the worsening COVID-19 pandemic, the traditional security perimeters of many organizations are being unexpectedly and rapidly expanded \u2013 increasing the potential attack surfaces for cyber criminals to exploit.\u201d<\/p>\n \u201cThe enforced need for home working and access to accurate healthcare information means that we are all now, more than ever, dependent on a secure, reliable Internet.\u201d<\/p>\n Shadowserver also outlined what would happen if it was unable to meet its financial obligations.<\/p>\n \u201cWithout immediate assistance from our friends and supporters in the global community, who we have served to the best of our ability for the past 15 years, The Shadowserver Foundation will no longer be able to continue to operate most of our core public benefit services, including free daily network reports for all constituents,\u201d said Shadowserver.<\/p>\n \u201cThis will remove our ability to notify National CERTs\/CSIRTs and network owners of infected victims inside their networks, and prevent timely remediation of abusable, misconfigured, or compromised devices globally.\u201d<\/p>\n Shadowserver added that its services are particularly important in the midst of the COVID-19 coronavirus outbreak, as many people from around the world are heavily reliant on the Internet to receive information about the virus.<\/p>\n Additionally, Shadowserver is currently protecting millions of malware-infected victims across the world from being used by cybercriminals \u2013 protection that would end if Shadowserver could not continue to operate.<\/p>\n \u201cWe call on all impacted constituents, partners, and members of the community to urgently rally to support Shadowserver\u2019s continuing public benefit operation,\u201d said Shadowserver.<\/p>\n Shadowserver told MyBroadband that South Africa is one of the countries with a National CERT-level organisation that does not receive reports from Shadowserver.<\/p>\n However, it has many other constituents in South Africa \u2013 including ISPs, banks, and universities.<\/p>\n \u201cThere are victims and affected organizations in every country in the world,\u201d said Shadowserver.<\/p>\n \u201cThe more scary part is that Shadowserver has been quietly keeping the world safer even if they were never aware of it.\u201d<\/p>\n Shadowserver added that if its service were to go away, the \u201chidden shield\u201d it provides will vanish.<\/p>\n \u201cAll the current fenced-off victims will be released and raise the possibility of being re-victimized for the malware they are already infected with, but held safely by us right now,\u201d Shadowserver explained.<\/p>\n Shadowserver said that while it would appreciate support from national entities, its product remains free-of-charge.<\/p>\n \u201cOf course we would prefer to see all the National CERT’s push the remediation harder, but our data comes without any strings,\u201d said Shadowserver.<\/p>\n \u201cIt is free to use as each organisation wishes, and at the same price, free.\u201d<\/p>\n Shadowserver said it welcomes any and all assistance in funding its new resources.<\/p>\n \u201cIt has been all hands on deck to raise the funding to first move our data centre, and second to pay for sustaining Shadowserver. Any organisation out there that would want to help, we are interested in hearing from them.\u201d<\/p>\n Countless malware threats that have previously been contained are at risk of being released into the wild again.<\/p>\n","protected":false},"author":341039,"featured_media":343297,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[15227,35,11697,63707],"class_list":["post-343295","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-internet","tag-cybersecurity","tag-headline","tag-shadowserver","tag-sinkhole"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/343295"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341039"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=343295"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/343295\/revisions"}],"predecessor-version":[{"id":343801,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/343295\/revisions\/343801"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/343297"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=343295"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=343295"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=343295"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}What is needed<\/h3>\n
What happens if Shadowserver shuts down<\/h3>\n
Shadowserver in South Africa<\/h3>\n
Now read: Coronavirus scam warning in South Africa<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"