View all newsletters
Receive our newsletter - data, insights and analysis delivered to you
  1. Technology
  2. Cybersecurity
October 8, 2012

Microsoft strikes deal with Chinese cybercrime websiste that hosted Nitol botnet

Founder of the site agrees to work in collaboration with Microsoft and China's central computer security agency to restrict misuse of the site's domains

By CBR Staff Writer

The Chinese firm that operated a web-hosting company,, which was associated with the Nitol DDoS botnet has agreed to work with Microsoft to prevent cybercriminals from using the domain.

Under the legal settlement to resume control of, its founder Peng Yong has assured that he would work in collaboration with Microsoft and China’s central computer security agency to restrict misuse of the site’s domains.

In September, Microsoft had filed a suit to operate the 70,000 malicious subdomains that were hosted on, and investigate a cybercrime gang.

Microsoft’s Operation b70 investigation revealed that several PCs were found to be preloaded with malicious code during their production at facilities, which was managed by infiltrating anxious supply chains to install the code.

But, further investigation revealed that the malware was most probably installed by a distributor, transporter, or reseller.

MIcrofost Digital Crimes Unit said in a statement to CBR in this particular case, Microsoft discovered that retailers were selling computers loaded with counterfeit versions of Windows software embedded with harmful malware.

"This means that the malware is loaded after the product is shipped by the original equipment manufacturer to a distributor, transporter, or reseller," the statement added.

Content from our partners
Green for go: Transforming trade in the UK
Manufacturers are switching to personalised customer experience amid fierce competition
How many ends in end-to-end service orchestration?

According to the investigation, the Nitol developers had hired webspace from and used it as a command and control system for their rising collection of infected computers.

Websites in our network
Select and enter your corporate email address Tech Monitor's research, insight and analysis examines the frontiers of digital transformation to help tech leaders navigate the future. Our Changelog newsletter delivers our best work to your inbox every week.
  • CIO
  • CTO
  • CISO
  • CSO
  • CFO
  • CDO
  • CEO
  • Architect Founder
  • MD
  • Director
  • Manager
  • Other
Visit our privacy policy for more information about our services, how New Statesman Media Group may use, process and share your personal data, including information on your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.