Waves of cyber attacks hit Netflix, Spotify, Twitter and others

i.b.nora

I am polka dot
Joined
Aug 13, 2003
Messages
8,887
Reaction score
391
Waves of cyber attacks hit Netflix, Spotify, Twitter
Eli Blumenthal and Elizabeth Weise ,
USA TODAY 3:07 p.m. EDT October 21, 2016


http://www.usatoday.com/story/tech/...-east-coast-netflix-spotify-twitter/92507806/

SAN FRANCISCO — At least two successive waves of online attacks blocked multiple major websites Friday, at times making it impossible for many users on the East Coast to access Twitter, Spotify, Netflix, Amazon, Tumblr and Reddit.

The first attacks appear to have begun around 7:10 am Friday, then resolved towards 9:30 am, but then a fresh wave began.

The cause was a large-scale distributed denial of service attack (DDoS) against Internet performance company Dyn that blocked user access to many popular sites.​
 
Chinese firm admits its hacked DVRs, cameras were behind Friday's massive DDOS attack
Botnets created from the Mirai malware were involved in Friday's cyber attack.
PC World


A Chinese electronics component manufacturer says its products inadvertently played a role in a massive cyberattack that disrupted major internet sites in the U.S. on Friday.

Hangzhou Xiongmai Technology, a vendor behind DVRs and internet-connected cameras, said on Sunday that security vulnerabilities involving weak default passwords in its products were partly to blame.

[...]

“Mirai is a huge disaster for the Internet of Things,” Xiongmai said in an email to IDG News Service. “(We) have to admit that our products also suffered from hacker's break-in and illegal use.”

[...]

Because these devices have weak default passwords and are easy to infect, Mirai has been found spreading to at least 500,000 devices, according to internet backbone provider Level 3 Communications.

[...]

To stop the Mirai malware, Xiongmai is advising that customers update their product’s firmware and change the default username and passwords to them. Customers can also disconnect the products from the internet.

[...]


https://www.malwaretech.com/2016/10/mapping-mirai-a-botnet-case-study.html


Hackers Sell $7,500 IoT Cannon To Bring Down The Web Again
Forbes


[...]

For all the fuss on Friday, when major sites, from Twitter to Amazon’s cloud, went into a mini-meltdown, the carnage was entirely avoidable. For two reasons, the web should have been better prepared for the onslaught, experts told FORBES.

[...]

If XM had shipped devices with decent protections prior to last September, and if partners had worked to improve security with the Chinese firm after the 2015 updates, those hundreds of thousands, if not millions, of devices may never have been hacked. And the Mirai botnet could never have grown to the beast that shook the web last week.

[...]

Twitter, Amazon Web Services, PayPal and others could’ve been better prepared too, two security experts told me: anyone running a site should consider a secondary, back-up DNS provider.

[...]

The shorter the TTL the quicker everything goes up in smoke if the authoritative DNS server is wiped offline, noted a security researcher who goes by the name MalwareTech. So Twitter et al should look to make their respective TTLs that much longer, they said.

[...]

“Mirai was one source of the attack and there were other variants as well. Our team is still investigating and doing analysis of the series of attacks we received, but it’s fair to say this was large, complex and sophisticated,” said Dyn’s chief strategy officer Kyle York.

[...
]


Being investigated http://www.nola.com/science/index.ssf/2016/10/cyberattack_that_hit_major_web.html
 
MEET THE FIRE HOSE
Sky News/AP via News.com.au



[...]

Members of a shadowy hacker group that calls itself New World Hackers claimed responsibility for the attack via Twitter, though that claim could not be verified. They said they organised networks of connected devices to create a massive botnet that threw a monstrous 1.2 trillion bits of data every second at Dyn’s servers. Dyn officials wouldn’t confirm the figure during a conference call with reporters.

[...]

For its part, a member of New World Hackers who identified themselves as “Prophet” told an AP reporter via Twitter direct message exchange that collective isn’t motivated by money and doesn’t have anything personal against Dyn, Twitter or any of the other sites affected by the attacks.

Instead, the hacker said, the attacks were merely a test, and claimed that the next target will be the Russian government for committing alleged cyberattacks against the US earlier this year.
“Twitter was kind of the main target. It showed people who doubted us what we were capable of doing, plus we got the chance to see our capability,” said “Prophet”. The claims couldn’t be verified.

[...]
 
[video=youtube;IXqzhel7Xm0]https://www.youtube.com/watch?v=IXqzhel7Xm0[/video]
 
IoT Growing Faster Than the Ability to Defend It
Last week’s use of connected gadgets to attack the Web is a wake-up call for the Internet of Things, which will get a whole lot bigger this holiday season
By Larry Greenemeier, Scientific American

Oct 26 16

"The IoT is a vast and growing virtual universe that includes automobiles,
medical devices, industrial systems and a growing number of consumer electronics devices. These include video game
consoles, smart speakers such as the Amazon Echo and connected thermostats like the Nest, not to mention the smart
home hubs and network routers that connect those devices to the internet and one another. Technology items have
accounted for more than 73 percent of holiday gift spending in the U.S. each year for the past 15 years, according to the
Consumer Technology Association. This year the CTA expects about 170 million people to buy presents that contribute
to the IoT, and research and consulting firm Gartner predicts these networks will grow to encompass 50 billion devices
worldwide by 2020. With Black Friday less than one month away it is unlikely makers of these devices will be able to patch
the security flaws that opened the door to last week’s attack."
 

Members online

Online statistics

Members online
200
Guests online
3,880
Total visitors
4,080

Forum statistics

Threads
591,819
Messages
17,959,585
Members
228,620
Latest member
ohbeehaave
Back
Top