Initially the team had no intention of taking a disruptive action against Nitol, but when further investigation led to a domain known as a haven for malicious activity, it decided it had to do something. The company traced more than 560 types of malware lurking in the 322.org domain.
Boscovich says the action was targeted so as not to disrupt legitimate users of the domain by taking down the entire domain. This tactic was so effective that it will likely become a standard tool, he says.
"This opens the door for future actions," he says, which are imminent.
"You'll see more from us," says Campana.
Read more about wide area network in Network World's Wide Area Network section.