A “bazooka” cyberattack described as the most powerful ever seen has slowed traffic on the Internet, security experts said on Wednesday, raising fresh concerns over online security.
The attacks targeted Spamhaus, a Geneva-based volunteer group that publishes spam blacklists used by networks to filter out unwanted e-mail, and led to cyberspace congestion that may have affected the Internet overall, according to Matthew Prince of the US security firm CloudFlare.
The attacks began last week, according to Spamhaus, after it placed on its blacklist the Dutch-based Web hosting site Cyberbunker, which claimed it was unfairly labeled as a haven for cybercrime and spam.
Photo: Reuters
The origin of the attacks has not yet been identified, but a BBC report said Spamhaus alleged that Cyberbunker, in cooperation with “criminal gangs” from Eastern Europe and Russia, was behind the attack.
The New York Times quoted Sven Olaf Kamphuis, who claimed to be a spokesman for the attackers, as saying that Cyberbunker was retaliating against Spamhaus for “abusing their influence.”
However, Kamphuis told the Russian news site RT that Cyberbunker was just one of several Web firms involved, protesting what he called Spamhaus’ bullying tactics.
“Spamhaus have pissed off a whole lot of people over the past few years by blackmailing ISPs [Internet service providers] and carriers into disconnecting clients without court orders or legal process whatsoever,” he said.
“At this moment, we are not even conducting any attacks... it’s now other people attacking them,” he said.
CloudFlare, which was called for assistance by Spamhaus, said the attackers changed tactics after the first layer of protection was implemented last week.
“Rather than attacking our customers directly, they started going after the network providers CloudFlare uses for bandwidth,” Prince said.
“Once the attackers realized they couldn’t knock CloudFlare itself offline ... they went after our direct peers,” he said.
Prince said the so-called distributed denial of service attack (DDoS), which essentially bombards sites with traffic in an effort to disrupt, was “one of the largest ever reported.”
Over the last few days, he added: “We’ve seen congestion across several major Tier 1 [networks], primarily in Europe, where most of the attacks were concentrated, that would have affected hundreds of millions of people even as they surfed sites unrelated to Spamhaus or CloudFlare.”
“If the Internet felt a bit more sluggish for you over the last few days in Europe, this may be part of the reason why,” Prince said in a blog post called “The DDoS That Almost Broke the Internet.”
Prince said these attacks used tactics different than the “botnets” — these came from so-called “open resolvers” that “are typically running on big servers with fat pipes.”
“They are like bazookas and the events of the last week have shown the damage they can cause,” he said. “What’s troubling is that, compared with what is possible, this attack may prove to be relatively modest.”
A spokesman for the network security firm Akamai said that based on the published data, “the attack was likely the largest publicly acknowledged attack on record.”
“The cyberattack is certainly very large,” added Johannes Ullrich of the US-based SANS Technology Institute, saying it was “a factor of 10 larger than similar attacks in the recent past.”
“But so far, I can’t verify that this affects Internet performance overall,” he said.
Spamhaus, which also has offices in London, essentially patrols the Internet to root out spammers and provides updated lists of likely perpetrators to network operators around the world.
CloudFlare estimates that Spamhaus “is directly or indirectly responsible for filtering as much as 80 percent of daily spam messages.”
The attacks began after Spamhaus blacklisted Cyberbunker, a Web hosting firm that “offers anonymous hosting of anything except child porn and anything related to terrorism.”
Cyberbunker denounced the move on its blog.
“According to Spamhaus, CyberBunker is designated as a ‘rogue’ host and has long been a haven for cybercrime and spam,” the Cyberbunker statement said.
“Of course, Spamhaus has not been able to prove any of these allegations.”
Prince said of the latest incident: “While we don’t know who was behind this attack, Spamhaus has made plenty of enemies over the years.
“We’re proud of how our network held up under such a massive attack and are working with our peers and partners to ensure that the Internet overall can stand up to the threats it faces,” Prince said.
Experts said the attacks flooded Spamhaus servers with 300 billion bits (35 gigabytes) per second of data. Prior DDoS attacks have been measured at 50 gigabytes per second.
Because of the way Internet traffic flows, these DDoS attacks created congestion and ripple effects around the Web.
Nearly half of China’s major cities are suffering “moderate to severe” levels of subsidence, putting millions of people at risk of flooding, especially as sea levels rise, according to a study of nationwide satellite data released yesterday. The authors of the paper, published by the journal Science, found that 45 percent of China’s urban land was sinking faster than 3mm per year, with 16 percent at more than 10mm per year, driven not only by declining water tables, but also the sheer weight of the built environment. With China’s urban population already in excess of 900 million people, “even a small portion
UNSETTLING IMAGES: The scene took place in front of TV crews covering the Trump trial, with a CNN anchor calling it an ‘emotional and unbelievably disturbing moment’ A man who doused himself in an accelerant and set himself on fire outside the courthouse where former US president Donald Trump is on trial has died, police said yesterday. The New York City Police Department (NYPD) said the man was declared dead by staff at an area hospital. The man was in Collect Pond Park at about 1:30pm on Friday when he took out pamphlets espousing conspiracy theories, tossed them around, then doused himself in an accelerant and set himself on fire, officials and witnesses said. A large number of police officers were nearby when it happened. Some officers and bystanders rushed
HYPOCRISY? The Chinese Ministry of Foreign Affairs yesterday asked whether Biden was talking about China or the US when he used the word ‘xenophobic’ US President Joe Biden on Wednesday called for a hike in steel tariffs on China, accusing Beijing of cheating as he spoke at a campaign event in Pennsylvania. Biden accused China of xenophobia, too, in a speech to union members in Pittsburgh. “They’re not competing, they’re cheating. They’re cheating and we’ve seen the damage here in America,” Biden said. Chinese steel companies “don’t need to worry about making a profit because the Chinese government is subsidizing them so heavily,” he said. Biden said he had called for the US Trade Representative to triple the tariff rates for Chinese steel and aluminum if Beijing was
Beijing is continuing to commit genocide and crimes against humanity against Uyghurs and other Muslim minorities in its western Xinjiang province, U.S. Secretary of State Antony Blinken said in a report published on Monday, ahead of his planned visit to China this week. The State Department’s annual human rights report, which documents abuses recorded all over the world during the previous calendar year, repeated language from previous years on the treatment of Muslims in Xinjiang, but the publication raises the issue ahead of delicate talks, including on the war in Ukraine and global trade, between the top U.S. diplomat and Chinese