We’re thrilled to announce that Spamhaus is now an official member of the Forum of Incident Responders and Security Teams (FIRST). As part of this knowledgable and highly regarded network, we look forward to helping influence positive change, sharing our insight more widely, and supporting the FIRST community in making the internet a safer place. Thank you, FIRST for this opportunity.

For those unfamiliar, who are FIRST?

FIRST is one of the silent heroes of the internet. Fundamentally, it’s a peer-to-peer governed network who work collaboratively to make the internet safer.

FIRST focuses on responding to incidents that have an impact at a country, or region, level and influence change through “cooperation and coordination in incident prevention, to stimulate rapid reaction to incidents, and to promote information sharing”.

By fostering an industry-leading global community, FIRST plays a significant role in keeping the internet safe.

How does FIRST improve security?

As the saying goes, knowledge is power. Never more accurate than in incident response and security! With that, FIRST concentrate on sharing trusted intelligence in a variety ways, not limited to:

  • Targeted intelligence sharing – FIRST utilizes vast data sources, including Spamhaus’ data, to identify malicious network behavior. FIRST then informs the relevant organizations to encourage appropriate remediation
  • Promotion of industry standards – best practice documents, hands-on classes, and special interest groups are just some of the ways FIRST provides guidance on how to keep on top of network abuse
  • Events – getting the best minds in the business together and focussing on how to improve security, FIRST events often focus on issues having regional impact and how to stay vigilant

The importance of becoming a FIRST member

While we have provided intelligence to FIRST for a long time, this new level of partnership is significant. In the words of our Industry Liaison, Matt Stith, “The FIRST organization provides Spamhaus with opportunities to collaborate with an international group of teams that are dedicated to the same mission of making the internet a safer place.”

Being a FIRST member will allow us to share our analysis and expertise more widely. We can provide support in a far more accessible way. And we can strengthen relationships to enhance our research and threat hunting capabilities.

So what’s next?

We will be joining the FIRST Dublin event taking place from June 26th to understand first-hand the community’s challenges and how we can support. Matt shared, “I am excited to have conversations in person to really refine how we can combat abuse, in its many forms, and contribute to the FIRST organization to further that undertaking.”

Later this year, we will also be launching a new tool, the Reputation Portal, which we know will be a game-changer for the community in monitoring and tackling abuse. For more information, you can find it here.

Let’s talk about the danger of residential proxy networks

25 May 2022


In our experience, residential proxies are an often overlooked security threat; one that can be very difficult to remediate for the end user who -in our experience- is entirely unaware of its existence.

Spamhaus Botnet Threat Update, Q1 2022

20 April 2022


It might've been a modest increase in new botnet C&Cs this quarter, but the offering of freebie services are attracting a load of badness and the LatAm region continues to struggle with abuse. Get all the latest insights in this quarter's report.

When doorbells go rogue!

19 October 2021


Here's a story of doorbells, specific software development kits (SDKs), proxies, and miscreants using your home network to send spam.