Tag Archives: DDoS

UK outlaws awful default passwords on connected devices

Getty Images reader comments 29 If you build a gadget that connects to the Internet and sell it in the United Kingdom, you can no longer make the default password “password.” In fact, you’re not supposed to have default passwords at all. A new version of the 2022 Product Security and Telecommunications Infrastructure Act (PTSI)… Read More »

DOJ quietly removed Russian malware from routers in US homes and businesses

Getty Images reader comments 52 More than 1,000 Ubiquiti routers in homes and small businesses were infected with malware used by Russian-backed agents to coordinate them into a botnet for crime and spy operations, according to the Justice Department. That malware, which worked as a botnet for the Russian hacking group Fancy Bear, was removed… Read More »

Biggest DDoSes of all time generated by protocol 0-day in HTTP/2

Aurich Lawson / Getty reader comments 6 with In August and September, threat actors unleashed the biggest distributed denial-of-service attacks in Internet history by exploiting a previously unknown vulnerability in a key technical protocol. Unlike other high-severity zerodays in recent years—Heartbleed or log4j, for example—which caused chaos from a torrent of indiscriminate exploits, the more… Read More »

Attackers find new ways to deliver DDoSes with “alarming” sophistication

Aurich Lawson / Getty reader comments 5 with The protracted arms race between criminals who wage distributed denial-of-service attacks and the defenders who attempt to stop them continues, as the former embraces “alarming” new methods to make their online offensives more powerful and destructive, researchers from content-delivery network Cloudflare reported Wednesday. With a global network… Read More »

Feds seize 13 more DDoS-for-hire platforms in ongoing international crackdown

Enlarge / A domain seizure notice from the Justice Department, showing the national seals of several other governments. reader comments 10 with The US Justice Department has sized the domains of 13 DDoS-for hire services as part of an ongoing initiative for combatting the Internet menace. The providers of these illicit services platforms describe them… Read More »

#GermanyRIP. Kremlin-loyal hacktivists wage DDoSes to retaliate for tank aid

Enlarge / An iteration of what happens when your site gets shut down by a DDoS attack. reader comments 62 with 0 posters participating Share this story Threat actors loyal to the Kremlin have stepped up attacks in support of its invasion of Ukraine, with denial-of-service attacks hitting German banks and other organizations and the… Read More »

Microsoft discovers Windows/Linux botnet used in DDoS attacks

reader comments 8 with 0 posters participating Share this story Microsoft researchers have discovered a hybrid Windows-Linux botnet that uses a highly efficient technique to take down Minecraft servers and performs distributed denial-of-service attacks on other platforms. Dubbed MCCrash, the botnet infects Windows machines and devices running various distributions of Linux for use in DDoS… Read More »

Prosecutors charge 6 people for allegedly waging massive DDoS attacks

Getty Images reader comments 16 with 0 posters participating Share this story Federal prosecutors on Wednesday charged six people for allegedly operating websites that launched millions of powerful distributed denial-of-service attacks on a wide array of victims on behalf of millions of paying customers. The sites promoted themselves as booter or stressor services designed to… Read More »

Syntax errors are the doom of us all, including botnet authors

Enlarge / If you’re going to come at port 443, you best not miss (or forget to put a space between URL and port). Getty Images reader comments 24 with 0 posters participating Share this story KmsdBot, a cryptomining botnet that could also be used for denial-of-service (DDOS) attacks, broke into systems through weak secure… Read More »

European Parliament declares Russia a terrorism sponsor, then its site goes down

Enlarge / An iteration of what happens when your site gets shut down by a DDoS attack. reader comments 96 with 0 posters participating Share this story The European Parliament website was knocked offline for several hours on Wednesday by a distributed denial-of-service (DDoS) attack that started shortly after the governing body voted to declare… Read More »