DDOS Attacks Amplified

More Dangers out there.

New Attack Amplifies DDoSes by 4 Billion-Fold

By Ars Technica, March 17, 2022

Researchers from eight organizations warn of a new distributed denial-of-service (DDoS) amplification attack that boosts DDoS volumes by a potential factor of four billion. Attackers have been using the Mitel MiCollab and MiVoice Business Express collaboration systems to launch attacks, with an amplification vector supplied by misconfigured Mitel servers.

"This particular attack vector differs from most UDP [user datagram protocol] reflection/amplification attack methodologies in that the exposed system test facility can be abused to launch a sustained DDoS attack of up to 14 hours in duration by means of a single spoofed attack initiation packet, resulting in a record-setting packet amplification ratio of 4,294,967,296:1," the researchers wrote. They suggested the attackers using this technique still seem to be experimenting.

From Ars Technica,  View Full Article   

DDos Attack Protection

 Useful piece.  More at the link. 

Home/News/Protection from DDoS Attacks – And Why It Is Useless/Full Text

ACM NEWS

Protection from DDoS Attacks – And Why It Is Useless, By Medium.com, December 9, 2021

DDoS is a type of internet attack capable of disrupting anything from a phone booth to the Pentagon for those unfamiliar with the subject. A total of 5,351,930 DDoS attacks were recorded in Q1 2021 alone. The average attack duration was 50 minutes, representing a 31% increase.

Network engineers (like ourselves) and security engineers are responsible for defending against such attacks.Our company is mainly a developer of apps for entertainment. Until recently, there was simply no need for network expertise as such in the company.

It was some coincidence that right before my first working day, the company had been subjected to a tsunami DDoS attack (evidently as a result of some people fighting in the meme comments).

Even more surprising was the fact that the team managed to deflect the blow without any third-party assistance despite lacking any real expertise in resisting attacks like these. Regardless, we had to jump in and investigate what had happened and how to prevent it from occurring again.

From Medium.com

View Full Article