Cyber Risks · Krebs on Security

Report: Recent 10x Increase in Cyberattacks on Ukraine

Summary: Quad9, a free anycast DNS platform, blocked 10 times its normal number of DNS requests from Ukraine on March 9, with a smaller spike from Poland. The company reported 4.6 million blocking events in Ukraine and Poland that day versus 1.4 million three weeks earlier on the same weekday, while overall traffic to its Kyiv point of presence dropped, presumably from fiber cuts or power outages.

What's compelling: The blocked queries point to phishing and malware on Ukrainian machines reaching out to command-and-control infrastructure, and the Poland spike tracks the more than 1.4 million Ukrainians who have fled there - the attack surface moves with the people.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related