Latest Hacking News And Events

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDBUrilwulHKRMN8_YiGwj7YIk94Q3ZPcvHV9Lv9iizzgaru6u_t3kEotmaHN0Fd6KkF4LGCVT9_e6B5FxgvcGF74OfyQukJeABGViWcFjGJRWSPjgGKjVy3ZyPCgpzuDDZKcNkTcFmOQ/s1600/Powerful-DDoS-Attack-Cripples-ProtonMail-Service-For-Days.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDBUrilwulHKRMN8_YiGwj7YIk94Q3ZPcvHV9Lv9iizzgaru6u_t3kEotmaHN0Fd6KkF4LGCVT9_e6B5FxgvcGF74OfyQukJeABGViWcFjGJRWSPjgGKjVy3ZyPCgpzuDDZKcNkTcFmOQ/s640/Powerful-DDoS-Attack-Cripples-ProtonMail-Service-For-Days.gif" width="640" /></a></div>
<br />
<br />
Geneva-based encrypted email service ProtonMail has been offline for most of the past two days after being targeted by what the company is calling an “extremely powerful DDoS attack.”<br />
<br />
The email service, developed by CERN scientists, was knocked offline on Nov. 3 when attackers started flooding their IP addresses with bogus traffic. Soon after, the company said the attack expanded to the datacenter in Switzerland where the its servers are located, and the service was interrupted.<br />
<br />
The company was not able to stop the attack, but has been working around the clock to get the email service back online. The ProtonMail team managed to restore service briefly on Wednesday, but a new round of DDoS attacks took it down again, the company announced on Twitter.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxQBGYmD7PZ_S5EP-uk3hkt_L5ghittJg-YncBO2WuLHZW6rLa6t7Y3bl9Mv2qj-AdD3-KLLOHHrrK7HhbHPC0XNASSZP9u5_waRLrmbeQW0yRc-wrkKLCaEIauAxWJq5P8D5yjUD4P5g/s1600/protonmail-twitter.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="236" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxQBGYmD7PZ_S5EP-uk3hkt_L5ghittJg-YncBO2WuLHZW6rLa6t7Y3bl9Mv2qj-AdD3-KLLOHHrrK7HhbHPC0XNASSZP9u5_waRLrmbeQW0yRc-wrkKLCaEIauAxWJq5P8D5yjUD4P5g/s640/protonmail-twitter.jpg" width="640" /></a></div>
<br />
<br />
Following its tweet, the company posted a series of updates on the social networking platform, informing users that the attack was ongoing. ProtonMail reported this morning that another attack was conducted while they were trying to restore the service, and they are still offline at the time of publishing.<br />
<br />
In a blog post, the company explained that the attack took down several other tech companies as well, along with some banks. They also noted that all user data is secure thanks to the implemented end-to-end encryption, although access to the server is limited.<br />
<br />
“To solve this problem we are working with the top companies and people both onsite in our Swiss data center and from around the world. We are confident we will be back online – we just wish it was sooner rather than later,” the company said. In the blog post, the company also appeals to users who have experience with mitigating enterprise level DDOS attacks to help it fend off the intrusion. Additionally, it announced on Twitter that it was looking for a datacenter in Switzerland to move its service to.</div><br>
<script async src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script>

<ins class="adsbygoogle"
     style="display:block"
     data-ad-client="ca-pub-7726750987177406"
     data-ad-slot="7596682374"
     data-ad-format="auto"></ins>
<script>
(adsbygoogle = window.adsbygoogle || []).push({});
</script>
<br>

Geneva-based encrypted email service ProtonMail has been offline for most of the past two days after being targeted by what the company...

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgs4CrnwVRdpgKmsZqr78IomhkK0anpWQfuZ8ZO2L8ypabDIC6I3cwU_ooJQ2NjD64lZwXJp2kVVccPGReTLORORUzOJR2P58uwNZdgTqwrQNFk1dhK2SQjAK4XcaSge3HNnty5jBY_WMM/s1600/DDoS11.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="303" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgs4CrnwVRdpgKmsZqr78IomhkK0anpWQfuZ8ZO2L8ypabDIC6I3cwU_ooJQ2NjD64lZwXJp2kVVccPGReTLORORUzOJR2P58uwNZdgTqwrQNFk1dhK2SQjAK4XcaSge3HNnty5jBY_WMM/s400/DDoS11.jpg" width="400" /></a></div>
<br />
<br />
<br />
<br />
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<strong><span style="font-size: small;"><span style="font-family: 'trebuchet ms', geneva;">A new threat advisory published this week by Akamai’s Security Intelligence Response Team warns organizations about three new types of reflection distributed denial-of-service (DDoS) attacks observed in recent months.</span></span></strong></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<strong><span style="font-size: small;"><span style="font-family: 'trebuchet ms', geneva;"><br /></span></span></strong></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<strong><span style="font-size: small;"><span style="font-family: 'trebuchet ms', geneva;"><br /></span></span></strong></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<span style="font-size: small;"><span style="font-family: 'trebuchet ms', geneva;">There are well over a dozen <a href="https://www.us-cert.gov/ncas/alerts/TA14-017A" style="color: #0076b4; font-weight: bold; text-decoration: none;" target="_blank">UDP protocols</a> that can be abused for the reflection and amplification of DDoS attacks, including DNS, NTP, SSDP, BitTorrent, RIPv1, mDNS, CharGEN, QOTD, NetBIOS, and Portmap. While some of these services have been abused for a long time, others are not as popular among attackers.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<span style="font-size: small;"><span style="font-family: 'trebuchet ms', geneva;"><br /></span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<span style="font-size: small;"><span style="font-family: 'trebuchet ms', geneva;">According to Akamai, attackers have recently started abusing the RPC portmap service, NetBIOS name servers, and Sentinel licensing servers.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<span style="font-size: small;"><span style="font-family: 'trebuchet ms', geneva;">The content delivery network (CDN) service provider reported spotting attacks leveraging NetBIOS, a service used by applications on separate computers to communicate over a LAN, sporadically between March and July 2015. In the attacks observed by the company, the attackers obtained amplification rates ranging between 2.56 and 3.85. Of the four attacks seen by Akamai, the largest peaked at 15.7 Gbps.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<span style="font-size: small;"><span style="font-family: 'trebuchet ms', geneva;">Another uncommon type of reflection attack spotted over the past period by the CDN company abused RPC Portmap (Portmapper), an Open Network Computing Remote Procedure Call (ONC RPC) service designed to map RPC service numbers to network port numbers.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<span style="font-size: small;"><span style="font-family: 'trebuchet ms', geneva;">These types of attacks are much more powerful than the ones leveraging NetBIOS, with the largest attack exceeding 100 Gbps. While the most common amplification factor observed by Akamai was approximately 10, experts noticed one instance where the traffic sent to the targeted server was multiplied more than 50 times.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<span style="font-size: small;"><span style="font-family: 'trebuchet ms', geneva;">Akamai said it had observed such attacks almost every day in September. In August, when the company noticed the first RPC Portmap reflection attacks, telecoms firm Level 3 Communications also warned organizations about such threats.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<span style="font-size: small;"><span style="font-family: 'trebuchet ms', geneva;">Another type of attack abuses Sentinel license servers, which are used to enforce and manage licensing in multi-user environments. The first such attack was observed by Akamai in June 2015 and it leveraged a vulnerable Sentinel server used by Stockholm University in Sweden. In September, Akamai mitigated a couple of Sentinel reflection DDoS attacks aimed at a gaming company and a financial firm, with a peak bandwidth of 11.7 Gbps detected for one of these attacks. DDoS protection company <a href="http://www.prnewswire.com/news-releases/nexusguard-finds-new-reflective-denial-of-service-threat----sentinel-attack-can-compromise-over-92000-vulnerable-global-machines-300147901.html" style="color: #0076b4; font-weight: bold; text-decoration: none;" target="_blank">Nexusguard</a> also warned about such attacks last month.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<span style="font-size: small;"><span style="font-family: 'trebuchet ms', geneva;">While the amplification factor for such attacks can exceed 40, attackers are limited by the fact that there aren’t many Sentinel servers that can be abused. Only 745 unique sources of attack traffic have been identified, Akamai said in its <a href="https://www.stateoftheinternet.com/downloads/pdfs/2015-state-of-the-internet-threat-advisory-ddos-reflection-netbios-name-server-rpc-portmap-sentinel-udp-ddos-attacks.pdf" style="color: #0076b4; font-weight: bold; text-decoration: none;" target="_blank">report</a>. </span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<span style="font-size: small;"><span style="font-family: 'trebuchet ms', geneva;">"Although reflection DDoS attacks are common, these three attack vectors abuse different services than we've seen before, and as such they demonstrate that attackers are probing the Internet relentlessly to discover new resources to leverage," said Stuart Scholly, senior vice president and general manager at Akamai’s Security Business Unit. "It looks like no UDP service is safe from abuse by DDoS attackers, so server admins need to shut down unnecessary services or protect them from malicious reflection. The sheer volume of UDP services open to the Internet for reflection DDoS attacks is staggering."</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 20px;">
<span style="font-size: small;"><span style="font-family: 'trebuchet ms', geneva;">Earlier this week, Symantec warned that attackers had started abusing MySQL servers infected with a piece of malware dubbed “Chikdos” for DDoS attacks.</span></span></div>
</div>
<br />
<script async="" src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script>

<br />
<ins class="adsbygoogle" data-ad-client="ca-pub-7726750987177406" data-ad-format="auto" data-ad-slot="7596682374" style="display: block;"></ins><script>
(adsbygoogle = window.adsbygoogle || []).push({});
</script>
</div>

DDoS Hacker Hacking news Latest News Security news New Types of Reflection DDoS Attacks Spotted

A new threat advisory published this week by Akamai’s Security Intelligence Response Team warns organizations about three new types...

Latest Hacking News And Events - dA1337

Powerful DDoS Attack Cripples ProtonMail Service For Days

New Types of Reflection DDoS Attacks Spotted

Popular Posts

Labels

[Gadgets][carouselslide][recent][9]