Zoho Suspended by Domain Registrar Over Phishy Emails

guest · Sep 24, 2018

Zoho Suspended by Domain Registrar Over Phishy Emails
September 24, 2018
https://www.bleepingcomputer.com/ne...ended-by-domain-registrar-over-phishy-emails/

In a bizarre sequence of events, after the CRM software company Zoho was taken offline by their domain registrar, they posted to Twitter asking for help getting their service back up and running again. When Zoho customer's contacted TierraNet, they were told the CRM service was taken down due to phishing violations.

According to tweets from the Zoho Twitter account and from Zoho CEO Sridhar Vembu, the Zoho.com domain was taken offline by their domain registrar TierraNet and were not able to resolve the outage via TierraNet's support and were being refused access to the executive team.

As Zoho customers started contacting TierraNet, the registrar replied that Zoho was taken offline for not taking care of abuse notices that TierraNet sent them regarding phishing emails.

"There were a total of 3 complaints in 2 months and we took action on 2 of them immediately and one is pending investigation," Vembu stated in a tweet. "We serve 40 million users. 3 complaints in 2 months."
Click to expand...

guest · Sep 28, 2018

Registrar Killing Zoho Over A Few Phishing Claims Demonstrates The Ridiculousness Of Having Registrars Police The Internet
September 28, 2018
https://www.techdirt.com/articles/2...sness-having-registrars-police-internet.shtml

For years, we've pointed out the dangers of the attempts to move the "policing" function up the internet stack (or down the internet stack, depending on your perspective) from the end-user internet services deeper to infrastructure players. We just recently warned about the mess that will be created by focusing on infrastructure players.

And yet, there's increasing pressure for registrars to police the internet. This is mostly because of people (starting with the legacy copyright players, but others as well) over-hyping the fact that if some content/services are taken down, it just pops back up somewhere else. So, those who focus on censorship try to look further and further along the stack to see where they can block even more.

But, because Tierranet decided it needed to "police the internet" with its ridiculously blunt tool of completely removing an entire service from the internet -- despite its millions of users who rely on it for critical business services -- Zoho was put in the unenviable position of trying to explain why its entire suite of services completely disappeared.
[...] It's even more astounding that a service the size of Zoho only received three such complaints. In a detailed post mortem / apology, the company says it's going to become its own registrar to avoid having anything like this happen again.
Click to expand...

zapjb · Sep 28, 2018

Off the cuff I say this is a good thing.

guest · Oct 3, 2018

Zoho domains central to keylogger, data theft campaigns worldwide
The Indian online office suite is reportedly being abused on a massive scale to exfiltrate data from compromised machines
October 3, 2018
https://www.zdnet.com/article/zoho-domains-central-to-keylogger-data-theft-campaigns-worldwide/

Researchers have uncovered a keylogger phishing campaign which abuses Zoho in order to spread and exfiltrate data from victim devices.

On Tuesday, security researchers from Cofense said that Zoho, a web-based office suite and email provider, is being abused by phishers and fraudsters on a massive scale.

The Indian company's domain was suspended briefly in September, the researchers said in a blog post. This was due to an "insufficient response" to the reported abuse.

Now restored, Zoho services are once again being used for keylogger-based phishing campaigns, Cofense says.
The software platform's email address service, on both zoho.com and zoho.eu domains, is being exploited in 40 percent of phishing campaigns in which email "is the primary exfiltration vehicle."
Click to expand...

Daveski17 · Oct 3, 2018

Interesting. A few years ago I stopped using Zoho mail after it became a tad glitchy.

Log in or Sign up

Zoho Suspended by Domain Registrar Over Phishy Emails

guest Guest

guest Guest

zapjb Registered Member

guest Guest

Daveski17 Registered Member

Log in or Sign up

Zoho Suspended by Domain Registrar Over Phishy Emails

guest Guest

guest Guest

zapjb Registered Member

guest Guest

Daveski17 Registered Member

Useful Searches