Cyber Risks · Krebs on Security

Who’s Attacking Whom? Realtime Attack Trackers

Summary: Krebs on Security rounds up real-time online attack trackers, noting that much of the data behind these live maps comes from a mix of actual targets and honeypots, and that organizations labeled as attackers are typically compromised systems relaying attacks launched elsewhere. The post covers FireEye's Cyber Threat Map, Norse's IPViking, Arbor Networks' Digital Attack Map fed by 270+ ISP customers with data back to June 2013, Kaspersky's Cyberthreat Real-time Map, Anubis Networks' Cyberfeed, the Honeynet Project's Honey Map, OpenDNS Labs' tracker, and PewPew, and notes the site itself was unreachable for several hours under attack by the same criminals who hit Sony and Microsoft's gaming networks on Christmas Day.

What you should know: The post's own caveat is the stake: attacker labels on these maps point to compromised systems inside those organizations, so a live map showing your country or company as a source may be reporting someone else's attack relayed through your network.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related