DDoS Attacks Archives

17Aug

By RBNo Comments

News

Large-scale DDoS attacks disrupted Threema secure messaging service

Earlier this week, the Threema secure messaging service was the subject of several distributed denial-of-service (DDoS) assaults that severely disrupted conversations. Because they rely on their own infrastructure, organizations that use Threema On-Prem have not encountered any problems. The end-to-end encrypted instant messaging service stated in a post-mortem study on Friday that the threat actor's frequent pattern changes made it challenging to protect against the attacks. The Swiss technology company of the same name created the premium messaging app Threema, which places a strong emphasis on security and anonymity. The service claims to have no advertisements, no profiling, and no covert data analysis. It is based on its own server architecture spread across multiple locatio...

Mirai-Based xlabs_v1 Botnet Exploits ADB to Hijack IoT Devices for DDoS Attacks

7May

By RBNo Comments

News

Mirai-Based xlabs_v1 Botnet Exploits ADB to Hijack IoT Devices for DDoS Attacks

A new Mirai-derived botnet known as xlabs_v1 has been discovered by cybersecurity researchers. It targets internet-exposed devices running Android Debug Bridge (ADB) in order to recruit them in a network that may launch distributed denial-of-service (DDoS) assaults. The malware was discovered, according to Hunt.io, after it found an exposed directory on a server housed in the Netherlands at IP address "176.65.139[.]44" without requiring any authentication. According to Hunt.io, the virus supports "21 flood variants across TCP, UDP, and raw protocols, including RakNet and OpenVPN-shaped UDP, capable of bypassing consumer-grade DDoS protection," and it is available as a DDoS-for-hire service intended to target Minecraft sites and game servers. The unique feature of xlabs_v1 is that...

Europol Disrupts NoName057(16) Hacktivist Group Linked to DDoS Attacks Against Ukraine

18Jul

By RBNo Comments

News

Europol Disrupts NoName057(16) Hacktivist Group Linked to DDoS Attacks Against Ukraine

The infrastructure of a pro-Russian hacktivist organization called NoName057(16), which has been connected to a series of distributed denial-of-service (DDoS) operations against Ukraine and its allies, has been disrupted by an international operation organized by Europol. More than 100 systems worldwide and a significant portion of the group's primary server infrastructure have been decommissioned as a result of the actions. In addition, two arrests were made in France and Spain, two dozen properties were searched in Spain, Italy, Germany, the Czech Republic, France, and Poland, and six Russian nationals were issued arrest warrants as part of the coordinated effort. Between July 14 and July 17, officials from Czechia, France, Finland, Germany, Italy, Lithuania, Poland, Spain, Sweden...

RondoDox Botnet Exploits Flaws in TBK DVRs and Four-Faith Routers to Launch DDoS Attacks

9Jul

By RBNo Comments

News

RondoDox Botnet Exploits Flaws in TBK DVRs and Four-Faith Routers to Launch DDoS Attacks

Researchers studying cybersecurity are drawing attention to a virus campaign that uses security holes in Four-Faith routers and TBK DVRs to enlist the devices in a brand-new botnet known as RondoDox. The vulnerabilities in question include CVE-2024-12856, an operating system (OS) command injection flaw that affects Four-Faith router models F3x24 and F3x36, and CVE-2024-3721, a medium-severity command injection vulnerability that affects TBK DVR-4104 and DVR-4216 DVRs. Many of these devices are placed in crucial locations, such as small offices, warehouses, and retail storefronts, where they sometimes remain unattended for years. They are therefore perfect targets because they are simple to exploit, difficult to find, and typically accessible to the internet directly due to out-of-da...

New HTTPBot Botnet Launches 200+ Precision DDoS Attacks on Gaming and Tech Sectors

19May

By RBNo Comments

News

New HTTPBot Botnet Launches 200+ Precision DDoS Attacks on Gaming and Tech Sectors

Researchers studying cybersecurity are drawing attention to a new botnet malware known as HTTPBot, which has been used mostly to target Chinese educational institutions, software enterprises, and the gaming industry. It has grown rapidly over the last few months, consistently using compromised devices to initiate external attacks, according to a report released this week by NSFOCUS. It gets around conventional rule-based detection methods by using dynamic feature obfuscation techniques and highly mimicked HTTP Flood attacks. The term "HTTPBot," which was first observed in the wild in August 2024, refers to the distributed denial-of-service attacks that are launched using HTTP protocols. It's written in Golang, which is unusual because it targets Windows systems. It is notable tha...

11Mar

By RBNo Comments

News

X hit by ‘massive cyberattack’ amid Dark Storm’s DDoS claims

The corporation turned on Cloudflare's DDoS safeguards after the Dark Storm hacktivist organization allegedly launched DDoS attacks that caused several X global disruptions on Monday. Elon Musk, the owner of X, acknowledged that a significant hack was the source of the disruptions, but he did not explicitly say that DDoS attacks were to blame. Musk wrote on X, "There was (is) a massive cyberattack against X. This took a lot of resources, yet we are assaulted every day. Either a nation or a sizable, well-coordinated group is involved. tracking. Since its founding in 2023, the pro-Palestinian hacktivist group Dark Storm has attacked organizations in the US, Europe, and Israel.As evidence of their DDoS operations against Twitter, the gang shared screenshots and URLs read more abo...

New Aquabot Botnet Exploits CVE-2024-41710 in Mitel Phones for DDoS Attacks

31Jan

By RBNo Comments

News

New Aquabot Botnet Exploits CVE-2024-41710 in Mitel Phones for DDoS Attacks

An active attempt has been made to use a medium-severity security hole affecting Mitel phones to entangle them in a network that may launch distributed denial-of-service (DDoS) assaults using a Mirai botnet variation known as Aquabot. CVE-2024-41710 (CVSS score: 6.8) is the vulnerability in question, which is a case of command injection in the boot process that might enable a malevolent actor to carry out arbitrary operations within the context of the phone. The Mitel 6970 Conference Unit, 6800 Series, 6900 Series, and 6900w Series SIP phones are all impacted. In mid-July 2024, Mitel addressed it. In August, a proof-of-concept (PoC) exploit for the vulnerability was made accessible to the general public read more about New Aquabot Botnet Exploits CVE-2024-41710 in Mitel Phones for D...

PHP Vulnerability Exploited to Spread Malware and Launch DDoS Attacks

11Jul

By RBNo Comments

News

PHP Vulnerability Exploited to Spread Malware and Launch DDoS Attacks

A recently discovered PHP security vulnerability has been reported to be used by a number of threat actors to propagate distributed denial-of-service (DDoS) botnets, bitcoin miners, and remote access trojans. The CVE-2024-4577 vulnerability (CVSS score: 9.8) in question gives an attacker the ability to remotely execute malicious commands on Windows computers that are configured with Chinese and Japanese language locales. It was made known to the public in early June 2024. Researchers at Akamai, Kyle Lefton, Allen West, and Sam Tinklenberg, identified a vulnerability called CVE-2024-4577 that lets an attacker bypass the command line and pass arguments that are parsed directly by PHP. They made this discovery on Wednesday. "The method used to translate Unicode characters into ASCII is...

New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks

5Jul

By RBNo Comments

News

New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks

Researchers studying cybersecurity have discovered Zergeca, a brand-new botnet that can launch distributed denial-of-service (DDoS) attacks. Because it refers to a string called "ootheca" that is found in the command-and-control (C2) servers ("ootheca[.]pw" and "ootheca[.]top"), the Golang-written botnet has earned its moniker. Zergeca is a functionally diverse DDoS botnet that supports six distinct attack methods in addition to proxying, scanning, self-upgrading, persistence, file transfer, reverse shelling, and gathering sensitive device data, according to a report published by the QiAnXin XLab team. Zergeca is also famous for utilizing a lesser-known library called Smux for C2 communications read more about New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks. G...

Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks

7Jun

By RBNo Comments

News

Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks

The Muhstik distributed denial-of-service (DDoS) botnet has been detected taking advantage of a security vulnerability that has been addressed that affects Apache RocketMQ in order to take control of vulnerable servers and grow its network. According to a research released this week by cloud security company Aqua, "Muhstik is a well-known threat targeting IoT devices and Linux-based servers, notorious for its ability to infect devices and utilize them for cryptocurrency mining and launching Distributed Denial of Service (DDoS) attacks." Attack campaigns using the virus were first noted in 2018. They have a history of spreading by taking advantage of known security holes, particularly those connected to web applications. CVE-2023-33246 (CVSS score: 9.8), a critical security flaw a...