FBI warns of new DDoS attack vectors: CoAP, WS-DD, ARMS, and Jenkins

guest · Jul 27, 2020

FBI warns of new DDoS attack vectors: CoAP, WS-DD, ARMS, and Jenkins
FBI believes device vendors won't disable these protocols and warns companies to take preventive and protective measures
July 27, 2020
https://www.zdnet.com/article/fbi-warns-of-new-ddos-attack-vectors-coap-ws-dd-arms-and-jenkins/

The Federal Bureau of Investigation sent an alert last week warning about the discovery of new network protocols that have been abused to launch large-scale distributed denial of service (DDoS) attacks.
The alert lists three network protocols and a web application as newly discovered DDoS attack vectors.

The list includes CoAP (Constrained Application Protocol), WS-DD (Web Services Dynamic Discovery), ARMS (Apple Remote Management Service), and the Jenkins web-based automation software.
Three of the four (CoAP, WS-DD, ARMS) have already been abused in the real-world to launch massive DDoS attacks, the FBI said based on ZDNet's previous reporting.
Click to expand...

The FBI says that because these newly discovered DDoS vectors are network protocols that are essential to the devices they're being used in (IoT devices, smartphones, Macs), device makers are unlikely to remove or disable the protocols in their products, hence the threat of a new wave of DDoS attacks looms going forward.

"In the near term, cyber actors likely will exploit the growing number of devices with built-in network protocols enabled by default to create large-scale botnets capable of facilitating devastating DDoS attacks," the FBI said referring to the new DDoS vectors.
As of now, these four new DDoS attack vectors have been used sporadically, but industry experts expect them to become widely abused by DDoS-for-hire services.
Click to expand...

Log in or Sign up

FBI warns of new DDoS attack vectors: CoAP, WS-DD, ARMS, and Jenkins

guest Guest

Log in or Sign up

FBI warns of new DDoS attack vectors: CoAP, WS-DD, ARMS, and Jenkins

guest Guest

Useful Searches