Senate Intelligence Committee Chairman Presses Domain Registrars Providing Support to Russian Influence Efforts

Press Release

"Information included in the affidavit supporting recent seizure of a number of these domains provides further indication of your industry’s apparent inattention to abuses by foreign actors engaged in covert influence. Specifically, Russian influence actors utilized a number of tactics, techniques, and procedures that – against the backdrop of extensive open source literature on Doppelganger’s practices – should have alerted your company to abuse of its services, including the use of cryptocurrency to purchase domains, heavy reliance on anonymizing infrastructure to access your registration services (including the use of IPs widely associated with cybercriminal obfuscation network activity), the use of credit cards issued to a U.S. company 'that has significant ties to, and employees based in, Russia,” use of fictitious and poorly-backstopped identities for registrants, and in at least one instance the use of a Russian address.'

“While foreign covert influence represents one of the most egregious abuses of the domain name system, the industry’s inattention to abuse has been well-documented for years, enabling malicious activity such as phishing campaigns, drive-by malware, and online scams – all possible because of malicious actors using your services… Given the continued lapses of your industry to address these abuses, I believe Congress may need to evaluate legislative remedies that promote greater diligence across the global domain name ecosystem.

“In the interim, your company must take immediate steps to address the continued abuse of your services for foreign covert influence – particularly in the days preceding, and weeks immediately following, Election Day. With the prospect of a close election – and declassified intelligence demonstrating the past practice of foreign adversaries in spreading narratives that undermine confidence in election processes– Americans will be particularly reliant on media organizations and state and local government websites to provide authoritative and accurate election information. It is imperative that your company work to diminish the risk that foreign adversaries use impersonated domains to promote false narratives in this context."

Source