Traffic Destined For Several Networks Including South Africa's Internet Solutions Was Hijacked By A Russian Telco

Traffic destined for several international and financial networks, including for South Africa's Internet Solutions, was hijacked briefly by Russian state owned telecommunications company, Rostelecom.

The incident occured on 26 April 2017.

Other notable networks, as reported, whose traffic was hijacked by the Russian state-oowned telecommunications company include Mastercard, HSBC, VISA, EMC Corporation and Swisscom.

BGP Stream Rostelecom Hijack
How the hijack played out. | BGP Stream

The incident happened as a result of Rostelecom hijacking IP addresses from AS3741 which belongs to Internet Solutions and contains 3,079,168 IP addresses. An AS (Autonomous System) is a group of IP addresses grouped by BGP (Border Gateway Protocol) to help direct Inyernet traffic where it needs to go.

The impact is said to have been minimal and for a limited period and so far indications are that it was not intentional and a likely result of misconfiguration.

Comments