Cyber attackers target South Korea

http://www.google.com/hostednews/ukpress/article/ALeqM5j1VdJzv_WYGNDHa2iAp0XkfdCGFQ

 

This made the national (NBC) televised news tonight.
Some US government websites were hit as well.

 

More information here:

RFI: DDoS Against Government and Civilian Web Sites
http://isc.sans.org/diary.html?storyid=6748


----
rich

 

Cyber-attacks blamed on North Korea
http://www.cbc.ca/technology/story/2009/07/08/koreas-cyber-attack236.html

 

2 year old article. Seems like this is going to be an ever increasing problem with N.KOREA.

http://www.wmdinsights.org/I4/EA1_NorthKoreaInfoTech.htm

 

I'm from South Korea, and it's chaos here.
If I turn on the TV, most channels are broadcasting about this attack.
I just hope we learn a lesson from this attack.
Maybe more investment in security?

P.S. I'm not sure if this attack has something to do with N.Korea. I doubt it. I hope.

 

Don't get too excited over the claims stating that NK was behind these attacks.

Shadowserver Report

 

Interesting find.

--------------------------------------------------​

The politics of this would still make me think it came from the minds of N.Korea and its Sympathizers

Potentially 180 000 ... 190 000 computers now trashed. Crikey! Thats a sting in the tail.

 

Yes nice link tsec


" but the malware gets dangerous. It has been widely reported that on July 10, 2009 the malware will become destructive and destroy the PCs. "

http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20090710

Does this include Vista PC's with or without UAC ? If so, how ?

 

No idea. But would be worth watching ShadowServer and ISC over the next few days to see if there is any further analysis of this thing.

And yes, the suspected amount of drones blew me away too. Crazy stuff

 

I've been wondering how the executable is launched. Maybe this explains it?

 

Fore anyone who is interested, here is a pdf detailing how the whole sorry thing works:

http://www.maxoverpro.org/77DDoS.pdf

 

OT:
Now, we can't just blame any nation without any evidence.
Maybe it's the black Illuminati, the men behind the New world order, the Real Big Brother with their Echelon and HAARP technologies, trying to instigate wars again. He he

I sorely missed System Junkie's conspiracy theories. he he

 

Have you guys checked out this thread on wilders. HJO's grandad would appear to have been a victim of this. Sounds like the drive is now trashed.

Mind blowing though, 200 000 bots turned into attackers, and then trashing them.

 

Wait a minute, how does this thing trash a hard drive? From what I know it's very difficult to do that from the software end of things... Even with a ruined MBR you can boot from a live CD and rewrite it. Does it just make the computer temporarily unusable (i.e. an MBR rewrite, reformat, and reinstall will fix it)? Or does it actually brick the drive?

 

Have a look here:

DDOS Madness Continued...
http://blog.fireeye.com/research/2009/07/ddos-madness-climax.html

----
rich

 

Good question! I've been wondering the same thing

 

According to my crystal ball(he he), this attack is just a prelude for something more big. This kind of attacks will be frequent.

I quote from someone called Todd Alpine:
I advise everyone to purchase a external hard drive and back up what you want to save, as soon all of us will find that the alleged power spikes and voltage surges, that will create serious problems to cause us to lose a lot, will also be wiping out a lot of electronic equipments as that is how it all will start slowely, to reduce the available of the INTERNET as it will be reduced. And more and more you will see that you cannot take your money out of the bank ATM Machines as Gee, there was something wrong in the bank software and GEE< they are soory for the inconvience and soon they will hope to fix the problem and again, these is all leading up to what will occur...as bigbrother will start to allow the failure of ATM machines and disruption of the Intenet slowely at first after AUGUST 2009, as the cat gets out of the bag on who is insolvent and the bottom feeders will be freaking out all over the World, so our bigbrother will not want the media to be telling this truth, as ****, it will piss off the fools who spend all of their time watching sports, big trucks and drinking beer by the case. ---end of quote---

Can System Junkie confirm these? Time to remove my tinfoil hat. He he

 

Might be of use to some of the paranoid out there wishing to block N & S Korean or Chinese IP blocks.

Chinese & Korean IP Blocks http://okean.com/thegoods.html
National block generator http://software77.net/geo-ip/

 

http://www.msnbc.msn.com/id/31905242/ns/technology_and_science-security/

 

Thanks for the link.
That explains the hard drive damage.

 

Wow, that's pretty extreme if you ask me.