Malicious BGP Hijacks: Appearances Can Be Deceiving
BGP hijacking is a well known threat to the Internet routing infrastructure. There has been considerable interest in developing tools that detect prefix hijacking but such systems usually identify a large number of events, many of them being due to some benign BGP engineering practice or misconfiguration. Ramachandran et al.  and later Hu et al.  also correlated suspicious routing events with spam and claimed to have found evidence of spammers temporarily stealing prefixes to send spam.