Web Giants Scrambled to Head Off a Dangerous DDoS Technique

Minimalist · May 19, 2020

Today researchers from Tel Aviv University and the Interdisciplinary Center of Herzliya in Israel released new details of a technique they say could allow a relatively small number of computers to carry out distributed denial of service attacks on a massive scale, overwhelming targets with fraudulent requests for information until they're knocked offline. The DDoS technique, which the researchers called NXNSAttack, takes advantage of vulnerabilities in common DNS software. DNS converts the domain names you click or type into the address bar of your browser into IP addresses. But the NXNSAttack can cause an unwitting DNS server to perform hundreds of thousands of requests every time a hacker's machine sends just one.
Click to expand...

https://www.wired.com/story/dns-ddos-amplification-attack/

guest · May 20, 2020

Microsoft issues mitigation for the NXNSAttack DNS DDoS attack
May 20, 2020
https://www.bleepingcomputer.com/ne...itigation-for-the-nxnsattack-dns-ddos-attack/

Microsoft has released a security advisory to mitigate the NXNSAttack vulnerability in DNS servers that could be used to amplify a single DNS request into a DDoS attack against authoritative DNS servers.

In summary, the NXNSAttack works by an attacker sending a DNS request to a recursive server for a domain under the attacker's control. As this recursive server does not have the authority to resolve the request, it sends a query to the authoritative DNS server for the attacker's domain.
This attack is illustrated by the image below created by Nic.cz in their blog post regarding the NXNSAttack attack.

More information about the NXNSAttack can be found at the NXNSAttack.com site created by the researchers, and Nic.cz's blog post is a recommended read.
Click to expand...

Mitigating the NXNSAttack attack on Windows DNS servers
Microsoft released the 'ADV200009 | Windows DNS Server Denial of Service Vulnerability' security advisory yesterday with mitigation for the NXNSAttack DNS attack.

"An attacker who successfully exploited this vulnerability could cause the DNS Server service to become nonresponsive." [...] Microsoft's ADV200009 security advisory explains.
Click to expand...

Log in or Sign up

Web Giants Scrambled to Head Off a Dangerous DDoS Technique

Minimalist Registered Member

guest Guest

Log in or Sign up

Web Giants Scrambled to Head Off a Dangerous DDoS Technique

Minimalist Registered Member

guest Guest

Useful Searches