Forest Global Training Partners

Cyber Risks · Krebs on Security

Inside ‘The Attack That Almost Broke the Internet’

Summary: In March 2013, a group of spammers and bulletproof hosting operators calling themselves STOPhaus launched a DDoS attack on Spamhaus.org that grew to 300 Gbps, briefly knocking offline Cloudflare, which called it 'The Attack that Almost Broke the Internet.' The campaign was allegedly organized by Dutchman Sven Olaf Kamphuis of CB3ROB and Cyberbunker after Spamhaus blacklisted several Cyberbunker address ranges; Kamphuis was arrested in Spain in April 2013, extradited to The Netherlands, denied involvement, and his trial is ongoing.

What you should know: The logs show the group scanning for misconfigured DNS servers to amplify and reflect traffic, and UK teenager Sean Nolan McDonough, allegedly hired by Yuri Bogdanov to run the attack, later pleaded guilty to coordinating it - the same reflection technique that still turns poorly defended resolvers into someone else's attack infrastructure.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related