DDoS Attacks Attacks Target Amazon, SoftLayer and Telecom Infrastructure

guest · Nov 12, 2019

DDoS Attacks Target Amazon, SoftLayer and Telecom Infrastructure
The specific type of TCP attack used in the recent spate of DDoS efforts were TCP SYN-ACK reflection attacks
November 11, 2019
https://threatpost.com/massive-ddos-amazon-telecom-infrastructure/150096/

The last 30 days has seen a renewed increase in distributed denial-of-service (DDoS) activity, according to researchers, who said that they have observed a number of criminal campaigns mounting TCP reflection DDoS attacks against corporations.

Researchers at Radware said that the list of victims include a number of large companies, including Amazon, IBM subsidiary SoftLayer, Eurobet Italia SRL, Korea Telecom, HZ Hosting and SK Broadband.
The first major event in October took the Eurobet network down.

“This attack was noticed by the security community due to the reflective nature of one of the attack vectors,” the researchers noted.
The specific type of TCP attack used in the recent spate of DDoS efforts were TCP SYN-ACK reflection attacks.
If the victim does not respond, the reflection service will continue to retransmit the SYN-ACK packet, resulting in amplification. The amount of amplification depends on the number of SYN-ACK retransmits by the reflection service, which can be defined by the attacker.
Click to expand...

Radware: Threat Alert: TCP Amplification Attacks

guest · Nov 14, 2019

TCP Reflection Attacks: Then and Now
November 14, 2019
https://blog.radware.com/security/a.../2019/11/tcp-reflection-attacks-then-and-now/

We recently published a blog post about the rise in TCP reflection attacks throughout 2019. The public was able to observe the reflection campaign’s targeting of different verticals because the criminal(s) behind the attacks are leveraging public infrastructure as their refractors.
Ultimately, we published our insight into these campaigns because of their impact on both primary and secondary targets, resulting in service degradation and the blacklisting of misrepresented IP addresses.

In 2002, SC Magazine covered the growth in a piece called ‘A next-generation DoS Attack: Distributed Reflections’ [...] Over the years, TCP-based attack vectors fell out of favor as mitigation defenses evolved and resources expanded.
And Today…
It appears now that criminals have rediscovered TCP reflection attacks almost 20 year later and the results have been surprising. The notion that we live in a perfect world where devices will only re-transmit packets five times has been shattered.
Defending Against TCP Reflection Attacks
The core issue with a TCP reflection attack is defending against it. The technique abuses a fundamental protocol to attack a primary victim and cause collateral damage. [...]
Click to expand...

Log in or Sign up

DDoS Attacks Attacks Target Amazon, SoftLayer and Telecom Infrastructure

guest Guest

guest Guest

Log in or Sign up

DDoS Attacks Attacks Target Amazon, SoftLayer and Telecom Infrastructure

guest Guest

guest Guest

Useful Searches