EURid’s Involvement in the Necurs botnet Takedown

BRUSSELS--(BUSINESS WIRE)--On 10 March 2020, Microsoft and partners across 35 countries took coordinated legal and technical steps to disrupt one of the world’s most prolific botnets: Necurs, which has infected more than nine million computers globally.

EURid assisted Microsoft with the disruption of the Necurs botnet through the use of its Abuse Prevention and Early Warning System (APEWS). APEWS tags potential malicious domain names during the registration process. Once tagged, these domain names are not delegated until they successfully pass a compliance and vetting process. This process effectively prevents domain names (like those used by the domain generation algorithm of the Necurs botnet) to be used for malicious and criminal purposes, while simultaneously offering cyber researchers and law enforcement the tools to identify potential victims and criminal actors.

“We continue our close collaboration with several partners and stakeholders in order to make the Internet, and the .eu space in particular, a safer place for all,” states Geo Van Langenhove, EURid Legal Manager.

More information on this action can be found here.

About EURid

EURid is the not-for-profit organisation that operates the .eu, .ею and .ευ top-level domains, following a tender process and appointment by the European Commission. EURid works with over 700 accredited registrars. As part of its ongoing commitment to data security, EURid has been certified for the ISO27001 security standard since 2013. EURid is also registered by the EU Eco-Management and Audit Scheme (EMAS), which is an expression of its environmental commitment. EURid has its headquarters in Diegem (Belgium), and regional offices in Pisa (Italy), Prague (the Czech Republic) and Stockholm (Sweden). More information at: www.eurid.eu.