Cyber Risks · Cisco Talos

itsoknoproblembro, the VRT has you covered

Summary: Cisco Talos found five copies of the DDoS tool used in the large-scale attacks on American banks posted on PasteBin, including web control panel filenames like indx.php, stph.php and stcp.php and code building default packet contents. The attacks, reported at bandwidths as high as 100 Gbps, work by compromising high-bandwidth systems, and Talos notes that at half of a 25 Mbps home upstream connection only 8,000 machines would be needed to generate a 100 Gbps attack.

What you should know: The tooling was sitting in public PasteBin posts, and the bandwidth math means a botnet far smaller than Rustock's claimed 150,000 to 2,400,000 machines is enough to overwhelm a target - while no IPS helps much when 50 Gbps is forced down a 10 Gbps pipe.

Read the original at Cisco Talos ↗

Topics
Zero-Days & Exploits
Related