6

https://krebsonsecurity.com/2016/10/ddos-on-dyn-impacts-twitter-spotify-reddit/#more-36727

A DDoS attack on Dyn, on 21st Oct 2016, caused outages for Twitter, SoundCloud, Spotify, Reddit, etc. on the East Coast of USA.

How was the attack carried out, its type, and other details about it?

  • 3
    Do you expect us to have more information than currently available in public media? There are no reliable information yet. – Steffen Ullrich Oct 21 '16 at 17:23
  • 2
    Yeah but when more info does finally show up, and this question gets answered, it will get massive upvotes ;-) – alexw Oct 21 '16 at 20:17
  • 1
    20 bucks on a Mirai variant. 20 Canadian dollars though... – INV3NT3D Oct 21 '16 at 22:21
1

Ecuador's government confirms that they cut Julian Assange's Internet connection, after another batch of email exchanges (involves Ms Hillary Clinton) was leaked by Wikileaks, at its embassy in London.
As per news, the DDoS attack was generated to take revenge for this.

Wikileaks requested the attackers to stop the DDoS attack immediately.

Type of attack
Latest reports indicate that the DDoS attack on Dyn infrastructure (particularly DNS servers) was generated using infected IoT devices (like CCTVs, WebCam and others). The source code of one such malware named Mirai was released on the Internet recently. It is speculated that this malware was used for generating the attack.

  • Would such an opensource alone be sufficient to launch the attack? (I guess no, for otherwise there would be a real catastrophe.) – Mok-Kong Shen Oct 31 '16 at 7:33
  • Mirai was one of the confirmed malware which was used to launch an attack on Dyn Infrastructure on Fri 21. There may be other malware (or other methods) but those were not confirmed by Dyn (or other security researchers). – Gaurav Kansal Oct 31 '16 at 7:35
  • My ignorant's conjecture is that that malware code is apprently not self-sufficient for achieving the reported success. For otherwise any kids would now be able to generate chaos on the Internet. – Mok-Kong Shen Oct 31 '16 at 7:54
  • They are. in the post releasing the source code, the user anna_senpai claims that at release the bot pulls 300k devices from telnet alone, but it's dropping. Conservatively assuming these can output 1Mb/s, they can deliver a 300Gb/s DDoS – J.A.K. Jan 7 '17 at 20:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.