Cyber Risks · Krebs on Security

DDoS on Dyn Impacts Twitter, Spotify, Reddit

Summary: On October 21, Dyn, which provides core DNS services for Twitter, SoundCloud, Spotify, Reddit and other sites, suffered a global distributed denial-of-service attack on its east coast DNS infrastructure beginning around 7:10 a.m. ET, causing outages and slowness for customers. Dyn reported all services normal at 13:20 UTC, then said the attacks had resumed and the event was ongoing; Flashpoint later reported indications that a Mirai-based botnet was involved.

Key Takeaway: A single DNS provider going down took major consumer sites with it, and the same Mirai code that powered a 620 Gbps attack on KrebsOnSecurity.com had been released publicly weeks earlier, with extortion messages now citing 700-800 Gbps and over 1 Tbps volumes that the author says will pass any remote protections.

Read the original at Krebs on Security ↗

Topics
Endpoint & Network Security
Related