Risky Bulletin: Russia starts blocking DoH and DoT
Russian users report blocks on DoH and DoT servers, including Cloudflare 1.1.1.1 and Google 8.8.8.8, in an apparent censorship crackdown.
Russian internet users began reporting failures connecting to DNS-over-HTTPS and DNS-over-TLS servers, suggesting a government crackdown on the two privacy protocols. The blocks reportedly cover Cloudflare's 1.1.1.1 and Google's 8.8.8.8 resolvers; Roskomnadzor has not officially confirmed the action. The agency tested a similar block in March on Beeline's network and had named DoH for blocking as early as 2021. The bulletin also briefly notes state-sponsored phishing of EU officials, a DDoS against Norway's Digdir, the ReliaQuest/ShinyHunters dispute, and older ransomware and breach disclosures.
- DoH and DoT are used in Russia with VPNs to bypass internet censorship
- Blocks reported across several regions; Roskomnadzor not officially confirmed
- March test block was observed and documented on the Beeline network
- Also covered: EU officials targeted by state hackers, Norway Digdir DDoS, Akira ransomware disclosures
- Vendors
- CloudflareGoogleBeeline
- Threat actors
- NoName057ShinyHuntersAkira
- Organizations
- RoskomnadzorCERT-EU
From the original article
12 min read at news.risky.biz
In other news: NoName057 leaks data on Spanish police and military; China and South Korea detain vishing gang; AI malware is not that common.
By Catalin Cimpanu · news.risky.biz
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.