Top Botnets By Name, Size And Scope

Botnets – apart from inundating out inboxes with spam – can also be used for ulterior purposes such as executing DDoS attacks or hosting websites, so understanding the “modus operandi” and size behind the well-known names is a good idea; Here’s a top ten botnet list. Read the full article. Help N...

Jose Nazario on Botnets and the History of DDoS Attacks

Dennis Fisher talks with Jose Nazario of Arbor Networks about the Mafiaboy attacks, the history of DDoS attacks and the botnet epidemic. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

The Root of the Botnet Epidemic

Over the course of a few days in February 2000, a lone hacker was able to bring some of the Web’s larger sites to their knees, using just a few dozen machines and some relatively primitive software to cripple Yahoo, eBay, Etrade, Amazon, ZDnet and others for hours at a time. No one knew it at the...

RIM Security Warns of Wireless DDoS Attacks

Hackers could one day turn ordinary smart phones into “rogue” devices to attack major wireless networks, Research In Motion’s security chief warned. Scott Totzke, RIM’s vice-president of BlackBerry security, said hackers could use smart phones to target wireless carriers using a technique similar...

ISPs Leave Modems Open to DDoS Attacks

Internet security experts say that misconfigured DSL and cable modems are worsening a well-known problem with the Internet’s DNS, making it easier for hackers to launch DDoS attacks against their victims. According to research, part of the problem is blamed on the growing number of consumer devic...

Guilt by Association: Modem Hacker Arrested for Others' Crimes

Hardware hacker and author, Ryan Harris, aka “DerEngel,” has been arrested in Boston for aiding and abetting intrusion and wire fraud. Harris oversees TCNiSO, a group who hacks cable modems and other hardware. Harris thinks he is being busted for the plights of those who took performance-boosting...

Riorey RIOS Hardocded Password

Title: Riorey "RIOS" Hardcoded Password Vulnerability Severity: High Full root access to the device Date: 07 October 2009 Versions Affected: RIOS 4.6.6 , 4.7.0 possibly others Discovered on: 25 July 2009 Vendor URL: www.riorey.com Author: Marek Kroemeke Overview: Riorey DDoS mitigation appliences...

Riorey RIOS Hardcoded Password Vulnerability 4.7.0

Exploit for unknown platform in category remote exploits ================================================== Riorey RIOS Hardcoded Password Vulnerability 4.7.0 ================================================== Title: Riorey RIOS Hardcoded Password Vulnerability 4.7.0 CVE-ID: OSVDB-ID: Author: Mar...

Riorey RIOS Hardcoded Password Vulnerability 4.7.0

No description provided by source. Severity: High Full root access to the device Date: 07 October 2009 Versions Affected: RIOS 4.6.6 , 4.7.0 possibly others Discovered on: 25 July 2009 Vendor URL: www.riorey.com Author: Marek Kroemeke Overview: Riorey DDoS mitigation appliences www.riorey.com are...

Riorey RIOS 4.7.0 - Hard-Coded Password

Severity: High Full root access to the device Date: 07 October 2009 Versions Affected: RIOS 4.6.6 , 4.7.0 possibly others Discovered on: 25 July 2009 Vendor URL: www.riorey.com Author: Marek Kroemeke Overview: Riorey DDoS mitigation appliences www.riorey.com are vulnerable to taking a full contro...

Riorey RIOS 4.7.0 - Hard-Coded Password

Riorey RIOS 4.7.0 - Hard-Coded Password Severity: High Full root access to the device Date: 07 October 2009 Versions Affected: RIOS 4.6.6 , 4.7.0 possibly others Discovered on: 25 July 2009 Vendor URL: www.riorey.com Author: Marek Kroemeke Overview: Riorey DDoS mitigation appliences www.riorey.co...

How to extract the broiler residual value-vulnerability warning-the black bar safety net

Often have friends ask me what to give the chickens what's the use? The broiler can do things or a lot of, here I only illustrate some of the things that want to be able to play a topic role. First of all, hands on course to have a preliminary broiler chickens. Broilers obtained in many ways, you...

Twitter and Adobe Struggle With Security

By Roel Schouwenberg On Tuesday we got another DDoS attack on Twitter. A lot of people are asking why Twitter doesn’t seem to be coping with attacks like these. And at the same time there are more and more people jumping on the bandwagon saying stay away from Adobe products. What’s the link? Two...

On the Twitter DDoS Attacks, Apple and Microsoft Patches

Threatpost editors Ryan Naraine and Dennis Fisher discuss the DDoS attacks against Twitter, Facebook and LiveJournal and delve into Apple’s Mac OS X patch and Microsoft’s Patch Tuesday plans. SHOW NOTES: UPDATE: Twitter Suffers DoS Attack Apple Warns of Mac Attack Risk via Image Files Microsoft...

Cutting Through The Twitter DDoS Hype

There are a lot of theories flying around about why Twitter and other social media services got knocked offline yesterday. I’ve heard rumors about it being linked to political tension between Georgia and Russia. Others blame Iran for the outages. I’m not a political commentator, therefore I canno...

Threatpost News Wrap #5: Microsoft Vulnerabilities, DDoS Attacks

Threatpost editors Dennis Fisher and Ryan Naraine discuss the recent vulnerabilities in ActiveX controls, Microsoft’s slow response to the video control flaw and the slew of DDoS attacks against U.S. government and commercial sites. Download SHOW NOTES: MyDoom DDoS Attacks Likely Work of...

MyDoom DDoS Attacks Likely Work of Unsophisticated Attackers

The ongoing DDoS attacks that have been targeting a series of U.S. government sites as well as some commercial sites is likely not the work of any government organization and is being executed by an old piece of malware that is designed to ruin files on infected PCs rather than steal data, expert...

A Cyberwarfare Reality Check

Let’s take a step back for a moment from who the actors are in the recent DDoS attacks and look at the root cause of the problem, because that isn’t going away. We have a horribly insecure software ecosystem that lets the bad guys take advantage of all the insecure software that vendors have...

DDoS Attacks Cripple U.S. and Korean Sites

From The New York Times Choe Sang-Hun Cyberattacks that have crippled the Web sites of several major American and South Korean government agencies since the July 4th holiday weekend appear to have been launched by a hostile group or government, South Korea’s main government spy agency said on...

DDoS Attacks Ongoing Against FTC, Other Sites

It looks like the distributed denial-of-service attack, once the favorite tactic of script kiddies and professional hackers alike, is coming back into favor. Attackers have been conducting an ongoing DDoS attack against the Federal Trade Commission’s main site, as well as some other government...