Re: How do you tell their age?
Exactly. Attackers registering domains for phishing and typosquatting and the like put them into play immediately because there's no reason not to. If enough people follow Unit 42's advice, we'll just see another service category added to the hacker forums: trade in idle pre-registered domains.
And, of course, jake's claim doesn't hold much water. Many of the major independent players in IT crime do have "inventory" and manage significant, long-lasting pools of resources. Anyone who pays attention to a decent IT security news source (RISKS, SANS Newsbites, Krebs, Schneier, Threatpost, ...) knows that. And the APT groups, which are mostly government-affiliated, most certainly do.
Biting the hand that feeds IT
