https://krebsonsecurity.com/2019/12/the-great-50m-african-ip-address-heist/
 
 
 
--------- Original Message ---------
Subject: Re: [anti-abuse-wg] Massive prefix theft in AFRINIC - attributed to an insider
From: "Michele Neylon - Blacknight" <michele@blacknight.com>
Date: 12/6/19 1:14 am
To: "Suresh Ramasubramanian" <ops.lists@gmail.com>, "anti-abuse-wg@ripe.net" <anti-abuse-wg@ripe.net>

Great work from Ron

Sad to see this happen, though it was to be expected considering how much IPs are now worth



--
Mr Michele Neylon
Blacknight Solutions
Hosting, Colocation & Domains
https://www.blacknight.com/
http://blacknight.blog/
Intl. +353 (0) 59 9183072
Direct Dial: +353 (0)59 9183090
Personal blog: https://michele.blog/
Some thoughts: https://ceo.hosting/
-------------------------------
Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty
Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845


On 04/12/2019, 19:43, "anti-abuse-wg on behalf of Suresh Ramasubramanian" <anti-abuse-wg-bounces@ripe.net on behalf of ops.lists@gmail.com> wrote:

Congratulations, Ron Guilmette. You’ve been doing this for years and this is your biggest success yet.

https://mybroadband.co.za/news/internet/330379-how-internet-resources-worth-r800-million-were-stolen-and-sold-on-the-black-market.html

tl;dr - The insider is apparently Ernest Byaruhanga, AFRINIC employee #2, and he has now separated from AFRINIC

--srs