Telegram MTProxy Servers Used to DDoS Iranian Cloud Provider

guest · Nov 12, 2019

Telegram MTProxy Servers Used to DDoS Iranian Cloud Provider
November 12, 2019
https://www.bleepingcomputer.com/ne...-servers-used-to-ddos-iranian-cloud-provider/

A cloud infrastructure provider in Iran found itself at the receiving end of a distributed denial-of-service (DDoS) attack through MTProxy servers that Telegram users in the country rely on to avoid government-enforced internet restrictions.
Using Telegram users for the attack
The method works against any target, be it a website or an online service. Last week, engineers from Arvan Cloud noticed a lot of traffic hitting their edge servers from IP addresses in Iran.

The company notes that these distributed attacks are different from what was seen before. They targeted Arvan Cloud edge servers, had no domain defined in the requests, traffic was recorded at layer two (data link) and did not use a common protocol.
Leveraging these servers would not be too difficult, either, as the attacker would just have to replace the address for one proxy server with the IP of the target machine.

Arvan Cloud warns that this context is detrimental to Iranian users, as proxy server admins can abuse their position for DDoS purposes.
Click to expand...

Log in or Sign up

Telegram MTProxy Servers Used to DDoS Iranian Cloud Provider

guest Guest

Log in or Sign up

Telegram MTProxy Servers Used to DDoS Iranian Cloud Provider

guest Guest

Useful Searches