DDoS Worm Creator Heading to Prison

An Estonian virus writer has been jailed for two and a half years for creating a Windows worm family that launched denial of service attacks on the websites of a local insurance firm and ISP. Read the full article. The Register...

Large DDoS Attacks Still a Serious Problem

In the world of botnets and denial-of-service attacks, 2009 was a very interesting year. While a handful of large, noisy botnets got most of the attention, there were thousands of serious, prolonged DDoS attacks that not only chewed up huge amounts of bandwidth but likely caused major problems fo...

Amazon, Wal-Mart Smacked By DDoS Attacks

If you’ve been doing some last minute Amazon holiday shopping on Wednesday evening, you’ve probably noticed that Amazon’s web site was sluggish and, at times, completely down; The same fate greeted Wal-Mart, Expedia, and a number of smaller sites. Read the full article. Mashable...

Top Botnets By Name, Size And Scope

Botnets – apart from inundating out inboxes with spam – can also be used for ulterior purposes such as executing DDoS attacks or hosting websites, so understanding the “modus operandi” and size behind the well-known names is a good idea; Here’s a top ten botnet list. Read the full article. Help N...

Jose Nazario on Botnets and the History of DDoS Attacks

Dennis Fisher talks with Jose Nazario of Arbor Networks about the Mafiaboy attacks, the history of DDoS attacks and the botnet epidemic. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

The Root of the Botnet Epidemic

Over the course of a few days in February 2000, a lone hacker was able to bring some of the Web’s larger sites to their knees, using just a few dozen machines and some relatively primitive software to cripple Yahoo, eBay, Etrade, Amazon, ZDnet and others for hours at a time. No one knew it at the...

RIM Security Warns of Wireless DDoS Attacks

Hackers could one day turn ordinary smart phones into “rogue” devices to attack major wireless networks, Research In Motion’s security chief warned. Scott Totzke, RIM’s vice-president of BlackBerry security, said hackers could use smart phones to target wireless carriers using a technique similar...

ISPs Leave Modems Open to DDoS Attacks

Internet security experts say that misconfigured DSL and cable modems are worsening a well-known problem with the Internet’s DNS, making it easier for hackers to launch DDoS attacks against their victims. According to research, part of the problem is blamed on the growing number of consumer devic...

Guilt by Association: Modem Hacker Arrested for Others' Crimes

Hardware hacker and author, Ryan Harris, aka “DerEngel,” has been arrested in Boston for aiding and abetting intrusion and wire fraud. Harris oversees TCNiSO, a group who hacks cable modems and other hardware. Harris thinks he is being busted for the plights of those who took performance-boosting...

Twitter and Adobe Struggle With Security

By Roel Schouwenberg On Tuesday we got another DDoS attack on Twitter. A lot of people are asking why Twitter doesn’t seem to be coping with attacks like these. And at the same time there are more and more people jumping on the bandwagon saying stay away from Adobe products. What’s the link? Two...

Threatpost News Wrap #5: Microsoft Vulnerabilities, DDoS Attacks

Threatpost editors Dennis Fisher and Ryan Naraine discuss the recent vulnerabilities in ActiveX controls, Microsoft’s slow response to the video control flaw and the slew of DDoS attacks against U.S. government and commercial sites. Download SHOW NOTES: MyDoom DDoS Attacks Likely Work of...

MyDoom DDoS Attacks Likely Work of Unsophisticated Attackers

The ongoing DDoS attacks that have been targeting a series of U.S. government sites as well as some commercial sites is likely not the work of any government organization and is being executed by an old piece of malware that is designed to ruin files on infected PCs rather than steal data, expert...

A Cyberwarfare Reality Check

Let’s take a step back for a moment from who the actors are in the recent DDoS attacks and look at the root cause of the problem, because that isn’t going away. We have a horribly insecure software ecosystem that lets the bad guys take advantage of all the insecure software that vendors have...

How to defend against botnet attacks

Botnets have become one of the more insidious threats on the Internet in the last few years. Large-scale botnets such as the Storm, Asprox and Nugache networks have caused tremendous problems by serving as platforms for spamming operations, DDoS attacks and other mischief. In this podcast from...

Mac OS X e-mail worm squirming

From ZDNet Dancho Danchev A newly discovered email worm dubbed OSX/Tored-A once again puts the spotlight on the potential worm-ability, and malware spreading tactics targeting Apple’s OS X. The worm propagates through emails harvested from infected hosts, and has a backdoor functionality allowing...

Jose Nazario on botnets and DDoS defense

Few people in the world know more about the internal workings of botnets, DDoS attacks and defense than Jose Nazario, a senior security researcher at Arbor Networks. Don’t miss his thoughts on why DDoS attacks are more prevalent in some regions than others and how to react if you’re attacked...

CVE-2003-1354

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942...

flash plug-horse technology-vulnerability warning-the black bar safety net

Recently in a foreign country on the website to see an article about Backdooring Flash Objects the walkthroughof the article, the translation test a bit First class Backdoor function Backdoor static function mainmc getURL"javascript:alert'hello from backdoor'"; As the initial script, written in...

w32.spybot.fcd worm infection

The remote system is infected with a variant of the worm w32.spybot.fcd. Infected systems will scan systems that are vulnerable in the same subnet in order to attempt to spread. This worm also tries to do DDoS against targets in the Internet. OpenVAS Vulnerability Test $Id:...

w32.spybot.fcd Worm Infection Detection

The remote system is infected with a variant of the worm w32.spybot.fcd. Infected systems will scan systems that are vulnerable in the same subnet in order to spread, creating a botnet that has been used for purposes such as DDoS attacks. This script was written by Jorge E Rodriguez - check the...