Reset
140 results
cyber extortion
/ Roland Dobbins, Steinthor Bjarnason

Fancy Lazarus DDoS Extortion Campaign

ASERT Threat Summary Date/Time: 17June2021 1300UTC Severity: Warning Distribution: TLP: WHITE Categories: Availability Contributors: Jon Belanger, Richard Hummel. Executive Summary...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
Session Traversal Utilities for NAT (STUN) Reflection/Amplification
/ Roland Dobbins, Steinthor Bjarnason

Session Traversal Utilities for NAT (STUN) Reflection/Amplification

Adversaries weaponize STUN servers by incorporating the protocol into DDoS-for-Hire services. Approximately 75k abusable STUN servers give DDoS attackers ample opportunity to...

  • Arbor Networks - DDoS Experts
  • DDoS Tools and Services
  • Attacks and DDoS Attacks
Quarterly DDoS Update
/ Carol Hildebrand

The Beat Goes On

The beat goes on: Threat actors launched approximately 2.9 million DDoS attacks in the first quarter of 2021, a 31% increase from the same time in 2020.

  • Attacks and DDoS Attacks
connected globe
/ Roland Dobbins, Steinthor Bjarnason

TsuNAME Zone Cyclic Dependency-Induced Recursive DNS Query Cascade

In mid-May 2021, security researchers at SIDN Labs, InternetNZ, and USC/ISI released a research paper describing a sabotage-based DDoS attack methodology dubbed ‘TsuNAME’ that...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
crosshairs
/ Roland Dobbins, Steinthor Bjarnason

Datagram Transport Layer Security (D/TLS) Reflection/Amplification DDoS Attack Mitigation Recommendations

Datagram Transport Layer Security (D/TLS) is a variant of the TLS encryption protocol implemented atop User Datagram Protocol (UDP), it is utilized to secure datagram-based...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
internet highway
/ Roland Dobbins, Steinthor Bjarnason

Plex Media SSDP (PMSSDP) Reflection/Amplification DDoS Attack Mitigation Recommendations

Amplified PMSSDP DDoS attack traffic consists of SSDP HTTP/U responses sourced from ports UDP port 32414 and/or UDP port 32410 on abusable Plex Media Server instances and directed...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
  • DDoS Tools and Services
DDoS Campaign
/ Richard Hummel, Carol Hildebrand

Crossing the 10 Million Mark: DDoS Attacks in 2020

For the first time, we observed DDoS attacks rise above 10 million annually in 2020, nearly 1.6 million more attacks than seen in 2019.

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
  • ASERT
ddos banner
/ Roland Dobbins, Steinthor Bjarnason

Microsoft Remote Desktop Protocol (RDP) Reflection/Amplification DDoS Attack Mitigation Recommendations - January 2021

Recently observed DDoS attacks leverage abusable Microsoft RDP service to launch UDP Reflection/Amplification attacks with an 85.9:1 amplification factor.

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
  • DDoS Tools and Services
cyberextortion
/ Roland Dobbins, Steinthor Bjarnason

Lazarus Bear Armada DDoS Extortion Campaign — December 2020

DDoS Extortion Update: As previously reported, a relatively prolific threat actor initiated a global campaign of DDoS extortion attacks in mid-August 2020, largely directed towards...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
hacker
/ Suweera De Souza

Dropping the Anchor

Trickbot has long been one of the key banking malware families in the wild. Despite recent disruption events, the operators continue to drive forward with the malware and have...

  • Malware
Cyber Extortion
/ Roland Dobbins, Steinthor Bjarnason

High-Profile DDoS Extortion Attacks — September 2020

Starting in mid-August 2020, a relatively prolific threat actor initiated a global campaign of DDoS extortion attacks largely directed towards regional financial and travel...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
Windows & Linux
/ ASERT Team

Lucifer’s Spawn

ASERT researchers have uncovered new information about Lucifer, which is a cryptojacking and distributed denial of service (DDoS) bot, originally found to exploit and run on...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
  • DDoS Tools and Services
  • Botnets