Re:Update to Microsoft Takedown – Domains Fully Restored
by Retr0spectrum on Monday July 07, 2014 @04:07PM
(#8001077)
Why would the command-and-control servers even need a domain name? Surely the IP could just be used directly?
[ Parent
| on HN ]
Re:Update to Microsoft Takedown – Domains Fully Restored
by Nickoladze on Monday July 07, 2014 @04:27PM
(#8001189)
The entire purpose of no-ip is so a server can keep the same domain easily while their IP changes (Dynamic DNS). I'm guessing that these servers were either rapidly changing IP addresses or being brought online/offline quickly and Microsoft wanted to locate them by hijacking no-ip so those servers told Microsoft directly when they were changing IP address.
Just a guess.
Re:Update to Microsoft Takedown – Domains Fully Restored
by Alupis on Monday July 07, 2014 @04:27PM
(#8001188)
Probably, but in this case, somehow Microsoft discovered they were using the noip.com's Dynamic DNS service... perhaps the Control servers "floated" around on the net and Dynamic DNS discovery was the best option?