DOS and DDOS attacks are far from a thing of the past or something that is easily mitigated. Mr. Krebs has taught us that over the last week. Organizations should take their preparations very seriously.
DDOS is not a new threat, but the ransomware component adds a new wrinkle and places security folks a bit more on edge. This is especially at issue for organizations who are bandwidth dependent for websites and other services.
At the end of the day, computing power is computing power, so leveraging CCTV systems to launch an attack makes sense. Proper system hardening often stops at the systems with which we are most comfortable or the systems that fall under some compliance or regulatory requirement. But this article demonstrates a painful truth – all computer systems are vulnerable and all pose a threat if we do not secure, update, patch and harden them appropriately.
This DDOS attack in the UK is significant not only for the target chosen, but also due to the timing.
This article details yet another example of an attack against the freedoms of the Internet potentially by an oppressive nation state.
Krebs said it well. This was a pathetic and cowardly act. As a father simply hoping to enjoy watching his wife and children play their new gaming platform only to be turned away by a network failure, I was seriously annoyed to hear it was a DDOS attack. This cowardly act should be shared with the public and these sad little thugs should be called out just as Krebs has done.
For those of us with an XBox or two connected in the house, this article should be of some concern. Those UPnP changes we had to make to our home routers for XBox Live to work may come back to haunt us…