article thumbnail

Brazil expert discovers Oracle flaw that allows massive DDoS attacks

Security Affairs

million servers running the RPCBIND service from being used in amplified DDoS attacks. The data showed that a DDoS attack was in progress, coming from port 111 of several servers, all from other countries. Securi ty Affairs – Oracle, DDoS). Oracle has just released a security update to prevent 2.3 Pierluigi Paganini.

DDOS 102
article thumbnail

Router security in 2021

SecureList

Routers are forever being hacked and infected, and used to infiltrate local networks. Number of router vulnerabilities according to cve.mitre.org, 2010–2022 ( download ). Number of router vulnerabilities according to nvd.nist.gov, 2010–2022 ( download ). Mirai is not the only DDoS malware to target routers.

DDOS 101
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Meet Ika & Sal: The Bulletproof Hosting Duo from Hell

Krebs on Security

For example, in 2010 Spamdot and its spam affiliate program Spamit were hacked, and its user database shows Sal and Icamis often accessed the forum from the same Internet address — usually from Cherepovets , an industrial town situated approximately 230 miles north of Moscow.

article thumbnail

CISA adds Ruckus bug and another six flaws to its Known Exploited Vulnerabilities catalog

Security Affairs

The activity is associated with a known DDoS botnet tracked as AndoryuBot that first appeared in February 2023. The bot supports multiple DDoS attack techniques and uses SOCKS5 proxies for C2 communications.

article thumbnail

The OpenSSL Project addressed three vulnerabilities

Security Affairs

In 2010, the Open SSL project addressed three vulnerabilities, including two DDoS issues rated high severity. SecurityAffairs – hacking, encryption). The issue affects servers using OpenSSL 1.0.2 which are vulnerable to SSL version rollback attacks. Pierluigi Paganini.

DDOS 106
article thumbnail

Law enforcement and Microsoft join forces to dismantle botnet using LED Light Control Console

Security Affairs

Threat actors used the consoles to deliver malware and ransomware through an IoT botnet that was also used to launch distributed denial-of-service (DDoS) attacks. “One particular IP was associated with dozens of activities related to the distribution of malware, phishing emails, ransomware, and DDoS attacks.”

IoT 71
article thumbnail

DDoS attacks in Q2 2021

SecureList

For example, April saw the active distribution of a new DDoS botnet called Simps — the name under which it introduced itself to owners of infected devices. The malware creators promoted their brainchild on a specially set-up YouTube channel and Discord server, where they discussed DDoS attacks.

DDOS 139