Cyber Risks · Krebs on Security

DDoS Mitigation Firm Has History of Hijacks

Summary: KrebsOnSecurity reported that BackConnect Inc., a DDoS mitigation firm, admitted to a BGP hijack of 255 Internet addresses from Bulgarian host Verdina[dot]net, which had been providing service to the booter service vDOS. Working with Dyn's Doug Madory, Krebs identified at least 17 possible BackConnect BGP hijacks over the prior year, five of which included forged BGP records, including an hours-long hijack against German host Ghostnet[dot]de and two against competitor Staminus Communications.

What you should know: A company paid to defend against DDoS attacks was found to have forged routing records to impersonate another provider, and the NANOG response framed the stake plainly: once providers cross from legal to illegal actions, the Internet descends into lawless chaos, and innocent parties get injured along the way.

Read the original at Krebs on Security ↗

Topics
Cybercrime & Law Enforcement
Related