Showing posts with label DDoS. Show all posts
Showing posts with label DDoS. Show all posts

Tuesday, May 15, 2018

New DDos Attack based on UPnP



The attack mechanism is a UPnP router that is happy to forward requests from one external source to another (in violation of UPnP behavior rules). Using the UPnP router returns the data on an unexpected UDP port from a spoofed IP address, making it more difficult to take simple action to shut down the traffic flood.

https://www.darkreading.com/new-ddos-attack-method-leverages-upnp/d/d-id/1331799

Monday, June 22, 2015

DDoS Attack and Flight Plan modified?




I understand DDoS Attack but, I feel bad and insecure that (if it is true that) the hackers were able to modify the flight plans


From the article:

On Sunday someone was able to infiltrate the computer system of the Polish airline LOT and successfully cancel 10 of the carrier’s flights. A dozen other flights were reportedly delayed, according to Reuters. 

“Initially, it seems that flight’s plan couldn’t be generated which may indicate that key nodes in the back office were compromised,” Santamarta said Monday. “On the other hand the inability to perform or validate data loading on aircraft (including flight plans), using the standard procedures, should make us think of another attack vector, possibly against the ground communication devices.”


“What if the incident was just a training action or reconnaissance operation before a more massive cyber-attack on a much busier airport like Charles de Gaulle in Paris or JFK in New York?” Nikishin said. “Regardless of the reason and the threat actors, we can see how our life depends on computers and how vulnerable to cyber-threats national critical infrastructure objects have become.” 


For More info

Tuesday, April 8, 2014

Monday, March 31, 2014

DDoS Threat Landscape report - Botnet Activity is up by 240%.



What surprises me is that it states, the top attack originating countries includes USA. The rest are India, China and Iran

According to the article:- 

The most common network attack method is a combination of two types of SYN flood attacks – one using regular SYN packets (exhaust resources) and another using large SYN (above 250 bytes) packets (for network saturation)

Almost 1 in every 3 attack exceeds 20Gbps.


The link below has more information:-




The full report can be downloaded from the following link

Monday, March 17, 2014

NATO Attacked - I mean DDoS Attack from pro-Russian Ukrainian hackers



I hope there was no compromise of sensitive data.

I wonder why we have referendums when they can be VETOed. 

According to the article:- 

The attacks came on the eve of Sunday's referendum on whether Ukraine's Crimea region should join Russia. The UN Security Council introduced a resolution declaring the referendum invalid, but Russia vetoed the resolution Saturday

The links below has more information:

Tuesday, March 11, 2014

DDoS Attack - This time it is from 162,000 legitimate WordPress sites




SNIPPETS from the Article:-

Simple - all happens with a simple ping-back request to the XML-RPC file

"This is a well-known issue within WordPress and the core team is aware of it, it's not something that will be patched, though. In many cases this same issue is categorized as a feature, one that many plugins use, so in there lies the dilemma."

It’s not uncommon that cyber criminals use PHP web application servers as bots in the attacks. Many WordPress sites, often using the out-of-date TimThumb plugin, were compromised in the past – the same happened to Joomla and other PHP-based applications,” he said.

“Attackers usually target unmaintained servers to which the attackers upload PHP web shells and then use those shells to further deploy attack tools. Attackers connect to the tools either directly or through intermediate servers, proxies or scripts.”


The links below has more information:

http://www.v3.co.uk/v3-uk/news/2333460/hackers-turn-162-000-wordpress-sites-into-ddos-attack-tools