Triple DDoS vs. Krebs OnSecurity
Summary: In the last week of July 2012, KrebsOnSecurity.com and its hosting provider were hit by a series of escalating DDoS attacks that blocked readers from the site and its RSS feed, beginning one day after the author signed up with anti-DDoS firm Prolexic. Prolexic analysts said the traffic signatures matched the Dirt Jumper family, including Di-BoTNet and Pandora, with more than 1,500 Pandora-infected bots used in one assault and a final DNS reflection attack that abused open recursive DNS servers to amplify traffic.
Why it matters: The attacks required no bespoke capability: Prolexic tied the traffic to kits sold underground that let anyone build a botnet, and Pandora's creators claim 10 infected PCs can down a small site. Arbor Networks reported DDoS attacks had grown 82% since June 2011, and unmanaged consumer and SOHO routers left open recursive DNS servers available as free amplification for anyone who wants them.
Read the original at Krebs on Security ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026