The Fight Against the Hydra: New DDoS Report from Link11

Complexity and number of attacks increased again.

---

This Week in Security: DDoS Techniques, Dirty Pipe, and Lapsus$ Continued

Denial-of-Service (DoS) amplification. Relatively early in the history of the Internet — it was only 14 years old at the time — the first DoS amplification attack was discovered. [TFreak] …read more

---

Russian defense firm Rostec shuts down website after DDoS attack

Rostec, a Russian state-owned aerospace and defense conglomerate, said its website was taken down today following what it described as a "cyberattack." [...]

---

Malware Posing as Russia DDoS Tool Bites Pro-Ukraine Hackers

Be careful when downloading a tool to cyber-target Russia: It could be an infostealer wolf dressed in sheep's clothing that grabs your cryptocurrency info instead.

---

Middleboxes now being used for DDoS attacks in the wild, Akamai finds

Malicious actors are starting to add TCP middlebox reflection to their arsenal

---

Alarm raised over bug that opens the door to colossal DDoS attacks

DDoS flaw has already been used in the wild, researchers are saying.

---

In-the-wild DDoS attack can be launched from a single packet to create terabytes of traffic

A test mode that shouldn't be exposed to the internet from a PBX-to-internet gateway responsible for amplification ratio of 4,294,967,296 to 1.

---

DDoS attacks now use new record-breaking amplification vector

A new reflection/amplification DDoS vector has been spotted in the wild, offering threat actors a record-breaking amplification ratio of almost 4.3 billion to 1. [...]

---

DDoS attacks could soon be bigger and more dangerous than ever

Experts say this year’s biggest DDoS attack could be tens of thousands of times bigger than those recorded so far.

---

Russia shares list of 17,000 IPs allegedly DDoSing Russian orgs

The Russian government shared a list of 17,576 IP addresses allegedly used to launch distributed denial-of-service (DDoS) attacks targeting Russian organizations and their networks. [...]

---

Hackers Find a New Way to Deliver Devastating DDoS Attacks

Cybercriminals are exploiting a fleet of more than 100,000 misconfigured servers to knock websites offline.

---

Log4shell exploits now used mostly for DDoS botnets, cryptominers

The Log4Shell vulnerabilities in the widely used Log4j software are still leveraged by threat actors today to deploy various malware payloads, including recruiting devices into DDoS botnets and for planting cryptominers. [...]

---

DDOs attackers have found this new trick to knock over websites

A theoretical attack becomes real.

---

Content filtering devices abused for 65x DDoS amplification

Researchers have identified an alarming new trend in DDoS attacks that target middlebox devices to attain enormous 6,533% amplification levels. With such an amplification level, threat actors can launch catastrophic attacks with limited bandwidth/equipment. [...]

---

DDoS Attempts Hit Russia as Ukraine Conflict Intensifies

Plus: Hacker recruits, NFT thefts, and more of the week’s top security news.

---

Ukrainian gov't sites, banks disrupted by DDoS amid invasion fears

Cloudflare said the attack was "relatively modest compared to large DDoS attacks we've handled in the past."

---

Ukrainian government and banks once again hit by DDoS attacks

The sites of several Ukrainian government agencies (including the Ministries of Foreign Affairs, Defense, and Internal Affairs, the Security Service, and the Cabinet of Ministers), and of the two largest state-owned banks are again targeted by Distributed Denial-of-Service (DDoS) attacks. [...]

---

Russia Was Behind DDoS Attacks Against Ukraine, US Officials Say

Plus: A crypto crime crackdown, Roblox ripoffs, and more of the week’s top security news.

---

White House pins Ukraine DDoS attacks on Russian GRU hackers

Today, the White House has linked the recent DDoS attacks that knocked down the sites of Ukrainian banks and defense agencies to Russia's Main Directorate of the General Staff of the Armed Forces (also known as GRU). [...]

---

Ukraine DDoS: 'Cyberattack' or Not?

The country was hit by a distributed denial-of-service attack earlier this week, but some say that doesn't rise to the level of "cyberattack." Here's why they're wrong.

---