DDoS attacks in Q2 2019

guest · Aug 5, 2019

DDoS attacks in Q2 2019
August 5, 2019
https://securelist.com/ddos-report-q2-2019/91934/

The second quarter of 2019 turned out to be richer than the first in terms of high-profile DDoS attacks. True, most of the campaigns that attracted media attention appeared to be politically, rather than commercially, motivated — and that despite the fact that some security experts discern a clear fall in hacktivism in recent years.

But compared to the same period last year, the difference is significant and upward — in Q2 2019 “smart” attacks saw 32 p.p. growth. The share of such attacks among all others continues to rise steadily: It increased both against last quarter (by 9 p.p.) and Q2 2018 (by 15 p.p.).

The duration of DDoS sessions also continues to grow steadily in absolute and relative terms (the longest of the defeated attacks, which was also the longest smart attack, lasted for 75 minutes — an impressive figure given that most attacks in this segment get filtered in the early stages)
Click to expand...

guest · Aug 5, 2019

Hackers Feast on Exotic DDoS Threat Vectors, as Botnet “Buffet” Gets Ever Larger
August 5, 2019
https://www.cbronline.com/news/ddos-threat-vectors

The company today pointed to five new DDoS threat vectors in its half year threat intelligence report, even as the high volume attacks seen in 2018 caused by the exploitation of insecure memcached servers have been thwarted by “collective action”.

Positively, there has been an impressive 32 percent decrease in high volume attacks of more than 500 Gbps, thanks to efforts to snuff out memcached attacks, which used the open-source, distributed, object-caching system to amplify denial of service assaults.
These are increasingly using novel new DDoS threat vectors. Here are five that NETSCOUT has increasingly seen in 2019.
1: Apple Remote Management Services (ARMS)
“In late June 2019, a new DDoS reflection attack vector using UDP port 3283 was used to attack service providers in Eastern Europe,” the company says.
Click to expand...

2: Ubiquity Discovery Protocol
Ubiquiti Networks manufactures a variety of networking devices, including wireless access points, routers, switches, and firewalls. In February 2019, researchers reported
new DDoS reflection-type attacks taking advantage of a vulnerability in the discovery protocol used by Ubiquiti devices (UDP port 10001).
3: CoAP (A new Memcached?)
The Constrained Application Protocol (CoAP) is a specialised protocol for IoT devices (sensors, controllers, and the like) but is also included in smartphones for use in home automation.
4: Web Services Dynamic Discovery (WS-DD)
The Web Services Dynamic Discovery protocol (WS-DD) is designed to locate services on a local network.
5: HTML5 Hyperlink Auditing Ping Redirection
“This attack uses a common HTML5 attribute in web sites — the tag ping — tricking any visitor to the web site to send HTML ping packets to the target [...]
Click to expand...

Minimalist · Aug 27, 2019

Protocol used by 630,000 devices can be abused for devastating DDoS attacks

Security researchers are sounding the alarm about the Web Services Dynamic Discovery (WS-DD, WSD, or WS-Discovery) protocol, which they say can be abused to launch pretty massive DDoS attacks.
Click to expand...

https://www.zdnet.com/article/proto...s-can-be-abused-for-devastating-ddos-attacks/

Log in or Sign up

DDoS attacks in Q2 2019

guest Guest

guest Guest

Minimalist Registered Member

Log in or Sign up

DDoS attacks in Q2 2019

guest Guest

guest Guest

Minimalist Registered Member

Useful Searches