Plex Media Servers Are Being Abused For DDoS Attacks

DDoS-for-hire services have found a way to abuse Plex Media servers to bounce junk traffic and amplify distributed denial of service (DDoS) attacks, security firm Netscout said in an alert this week. From a report: The company’s alert warns owners of devices that ship with Plex Media Server, a web application for Windows, Mac, and Linux that’s usually used for video…

Citrix Devices Are Being Abused as DDoS Attack Vectors

Threat actors have discovered a way to bounce and amplify junk web traffic against Citrix ADC networking equipment to launch DDoS attacks. From a report: While details about the attackers are still unknown, victims of these Citrix-based DDoS attacks have mostly included online gaming services, such as Steam and Xbox, sources have told ZDNet earlier today. The first of these attacks…

Imprisoned ‘Anonymous’ Hacktivist Martin Gottesfeld Files His First Appeal

In early 2019, Martin Gottesfeld of Anonymous was sentenced under America’s “Computer Fraud and Abuse Act” to 10 years in federal prison for his alleged role in the 2014 DDoS attacks on healthcare and treatment facilities around Boston. (Gottesfeld was sentenced by the same judge who oversaw the Aaron Swartz case.) Gottesfeld has just filed his first appeal, and Slashdot reader…

Academics Studied DDoS Takedowns and Said They’re Ineffective, Recommend Patching Vulnerable Servers

A team of Dutch and German academics has studied the aftermath of a major crackdown against DDoS providers and concluded that law enforcement takedowns are largely ineffective, recommending that authorities rather focus on patching the vulnerable systems that are abused for the DDoS attacks in the first place. From a report: The study, published last year on paper-hosting service arXiv, analyzed…

Some Believe the US Has Been Hit By Large-Scale DDoS Attack — Others Are Skeptical

Forbes reports major internet outages across many companies including T-Mobile, Fortnite, Instagram, Comcast, and Chase Bank. Some experts believe it is the result of a coordinated attack, others not so much. Slashdot reader bobthesungeek76036 shares the report: On June 15, a flurry of reports on a number of different services in the U.S. have indicated that the country may be experiencing…

White Supremacists Built a Website To Doxx Interracial Couples

White supremacists have reportedly built a website that names, shames, and effectively promotes violence against interracial couples and families — “and it’s been circulated in some of the darkest corners of the internet, including in neo-Nazi Discord servers and accelerationist Telegram channels,” reports VICE News. An anonymous reader shares the report: The website was created in April but was taken offline…

China Resurrects Great Cannon For DDoS Attacks On Hong Kong Forum

An anonymous reader quotes a report from ZDNet: After more than two years since it’s been used the last time, the Chinese government deployed an infamous DDoS tool named the “Great Cannon” to launch attacks against LIHKG, an online forum where Hong Kong residents are organizing anti-Beijing protests. […] DDoS attacks with the Great Cannon have been rare, mainly because they…

Anonymous Hacker Gets Six Years In Prison For DDoS Attacks

An anonymous reader quotes a report from ZDNet: An Ohio man was sentenced last month to six years in prison for a series of DDoS attacks against websites for the city of Akron, Ohio, and the Akron police department. The man, 33-year-old James Robinson, was arrested in May 2019 and pleaded guilty to all accusations, most of which were easy to…

macOS Systems Can Be Abused In DDoS Attacks

An anonymous reader writes: “DDoS-for-hire services, also known as DDoS booters, or DDoS stressors, are abusing macOS systems to launch DDoS attacks,” reports ZDNet. “These attacks are leveraging macOS systems where the Apple Remote Desktop feature has been enabled, and the computer is accessible from the internet, without being located inside a local network, or protected by a firewall. More specifically,…

Dutch Police Take Down Hornets’ Nest of DDoS Botnets

Dutch police have taken down this week a bulletproof hosting provider that has sheltered tens of IoT botnets that have been responsible for hundreds of thousands of DDoS attacks around the world, ZDNet reports. From the report: Servers were seized, and two men were arrested yesterday at the offices of KV Solutions BV (KV hereinafter), a so-called bulletproof hosting provider, a…