[anti-abuse-wg] Massive prefix theft in AFRINIC - attributed to an insider

On 13/12/2019 11:10, Fi Shing wrote:

Again, great work Ron!

-Hank

> https://krebsonsecurity.com/2019/12/the-great-50m-african-ip-address-heist/
>
>     --------- Original Message ---------
>     Subject: Re: [anti-abuse-wg] Massive prefix theft in AFRINIC -
>     attributed to an insider
>     From: "Michele Neylon - Blacknight" <michele at blacknight.com>
>     Date: 12/6/19 1:14 am
>     To: "Suresh Ramasubramanian" <ops.lists at gmail.com>,
>     "anti-abuse-wg at ripe.net" <anti-abuse-wg at ripe.net>
>
>     Great work from Ron
>
>     Sad to see this happen, though it was to be expected considering
>     how much IPs are now worth
>
>
>
>     --
>     Mr Michele Neylon
>     Blacknight Solutions
>     Hosting, Colocation & Domains
>     https://www.blacknight.com/
>     http://blacknight.blog/
>     Intl. +353 (0) 59 9183072
>     Direct Dial: +353 (0)59 9183090
>     Personal blog: https://michele.blog/
>     Some thoughts: https://ceo.hosting/
>     -------------------------------
>     Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business
>     Park,Sleaty
>     Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845
>
>
>     On 04/12/2019, 19:43, "anti-abuse-wg on behalf of Suresh
>     Ramasubramanian" <anti-abuse-wg-bounces at ripe.net on behalf of
>     ops.lists at gmail.com> wrote:
>
>     Congratulations, Ron Guilmette. You’ve been doing this for years
>     and this is your biggest success yet.
>
>     https://mybroadband.co.za/news/internet/330379-how-internet-resources-worth-r800-million-were-stolen-and-sold-on-the-black-market.html
>
>     tl;dr - The insider is apparently Ernest Byaruhanga, AFRINIC
>     employee #2, and he has now separated from AFRINIC
>
>     --srs
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ripe/mail/archives/anti-abuse-wg/attachments/20191213/37ab27a3/attachment.html>