Large-scale DDoS Attack Abuses HTML's Hyperlink Audit Ping Facility

guest · Apr 15, 2019

Large-scale DDoS Attack Abuses HTML's Hyperlink Audit Ping Facility
April 15, 2019
http://www.securityweek.com/large-scale-ddos-attack-abuses-htmls-hyperlink-audit-ping-facility

Imperva researchers Vitaly Simonovich and Dima Bekerman monitored an attack that peaked at a massive 7,500 requests per second, and delivered more than 70 million requests over a four-hour period from around 4,000 user IPs. To put this in perspective, a similar mobile Android-based DDoS attack in 2016 achieved a peak of just 400 requests per second from 27,000 unique IPs.

The new approach uses the HTML5 ping attribute. This is used legitimately to track clicks on website links -- albeit with some reservations from privacy activists who view it as a form of user tracking.
Although the new attack primarily emanated from QQBrowser users, the technique could involve almost any browser. At this time, Firefox is one of the few browsers that have the ping attribute disabled by default.

"If you are not expecting or do not need to receive ping requests to your Web server," suggest the researchers, "block any Web requests that contain 'Ping-To' and/or 'Ping-From' HTTP headers on the edge devices (Firewall, WAF, etc.). This will stop the ping requests from ever hitting your server."
Click to expand...

Vasudev · May 22, 2019

Ddos can cause some harmful activity and lead to unexpected circumstances. That is a reason to think over using positive technologies https://www.ptsecurity.com/ww-en/products/af/

Log in or Sign up

Large-scale DDoS Attack Abuses HTML's Hyperlink Audit Ping Facility

guest Guest

Vasudev Registered Member

Log in or Sign up

Large-scale DDoS Attack Abuses HTML's Hyperlink Audit Ping Facility

guest Guest

Vasudev Registered Member

Useful Searches