Prolexic DDOS Mitigation Podcast: Recent Episodes
Prolexic
Distributed Denial of Service (DDoS) attacks can damage your business, so it’s important to take preventive steps to defend against these events. You should hire a DDoS mitigation service and, in cooperation with it, run tests to ensure that your system is adequately protected. In addition, you should devise a policy that informs personnel of their duties and responsibilities during a DDoS cyberattack. Businesses should interview their DDoS mitigation service to confirm that it can properly defend against DDoS attacks. Prolexic provides a variety of tools and services to mitigate this increasingly common threat
Malicious actors using the Zeus Crimeware gain control over and access to information on infected host computers, including smartphones and tablets. For example, the attacker can request a screenshot of all displayed content on a host device, which could reveal sensitive information. In addition, the attacker can force the host to download and run remote and local files, or inject code to change the display of a webpage displayed by the host’s browser. Find out more about this DDoS threat in the full Prolexic Zeus Crimeware Kit Threat Advisory, available at Zeus threat http://www.prolexic.com/knowledge-center-ddos-threat-advisory-zeus-zbot-malware-crimeware-kit-cybersecurity-audio.html.
http://bit.ly/YWe7dy | Many older SNMP devices have the ability to take public queries from the Internet enabled by default, allowing malicious actors to launch reflected DDoS attacks by directing SNMP messages at a chosen target. To stop these devices from participating in attacks, network administrators need to manually check for the presence of this protocol and turn off public access. Find out more about this DDoS threat in the full Prolexic SNMP Threat Advisory, available at http://bit.ly/YWe7dy.
http://www.prolexic.com/knowledge-center-ddos-threat-advisory-storm-network-stress-tester-crimeware-doc-audio.html | The Storm Network Stress Tester DDoS crimeware toolkit targets Windows XP (or higher) operating systems, infecting computers with malicious software that turns them into attacker-controlled, obedient zombies. Once infected, malicious actors can manipulate the computers they control remotely, allowing an almost unlimited variety of abuse. Find out more about this DDoS threat in the full Prolexic Storm Network Stress Tester Threat Advisory, available at http://www.prolexic.com/knowledge-center-ddos-threat-advisory-storm-network-stress-tester-crimeware-doc-audio.html.
http://www.prolexic.com/knowledge-center-ddos-attack-report-2014-q1.html?cvosrc=3rdParty.NationalPositions.PRS-ARQ14-casestudy | In Q1 2014, Prolexic successfully mitigated its largest DDoS attack campaign against a Prolexic customer, peaking at more than 200 Gbps and 53.5 Mpps. Learn what up-and-coming strategies were used by the attackers in this short presentation. Full details on this attack and other DDoS trends are provided in the Prolexic Q1 2014 DDoS attack report, available for a free download at http://bit.ly/1klfyvQ.
http://www.prolexic.com/knowledge-center-ddos-threat-advisory-dns-flooder-audio.html | By exploiting vulnerable DNS servers – or setting up their own – malicious actors can launch powerful DDoS reflection attacks using the new DNS Flooder cybercrime toolkit. The toolkit exploits nuances of the DNS protocol to amplify attacks by a factor of 50 or more, while making the attacker almost entirely anonymous. Find out more about this DDoS threat in the full Prolexic DNS Flooder Threat Advisory, available at http://www.prolexic.com/knowledge-center-ddos-threat-advisory-dns-flooder-audio.html
http://www.prolexic.com/knowledge-center-ddos-attack-report-Q1-2014-attack-spotlight-audio.html | In Q1 2014, DDoS attackers chose a new and powerful DDoS technology to launch their attacks – enabling the largest attack ever to cross the Prolexic (now part of Akamai) mitigation network. Find out more about the most popular industry targets, techniques, trends and other cyber-threat statistics in the full Prolexic Q1 2014 DDoS attack report, available for a free download at: http://www.prolexic.com/knowledge-center-ddos-attack-report-Q1-2014-attack-spotlight-audio.html
http://www.prolexic.com/knowledge-center-dos-and-ddos-attack-reports.html | Cyber attackers are choosing reflection, not infection, to launch high-bandwidth attacks. For more information listen to this audio from Prolexic
http://www.prolexic.com/why-prolexic-protected-by-prolexic-ddos-protection.html | This audio goes into depth about how DDoS attackers have been able to use the pingback function in the WordPress publishing platform to take over an attack target with millions of connection requests.
http://www.prolexic.com/industries-dos-and-ddos-protection-media-entertainment-gaming.html | This audio gives details on DDoS attacks -- specifically in Q1 2014, where Media and Entertainment took the most impact of DDoS attacks.
http://www.prolexic.com/knowledge-center-white-paper-ddos-cyber-attacks-global-markets.html | The economic infrastructure provided by financial firms, including trading platforms, is essential to national economies. So that leads to the question: Are DDoS cyber attackers trying to manipulate stock prices and trading markets? The experts in PLXsert think so. Find out more about this threat to the financial industry in this short audio podcast from Prolexic.
http://www.prolexic.com/ | Prolexic now apart of Akamai threat advisory about NTP amplification DDoS attacks includes an analysis of how it generates a monlist payload, along with DDoS protection and mitigation techniques, and a review of two DDoS attack campaigns using NTP amplification techniques.
http://www.prolexic.com | choosing a DDoS protection provider is a critical business decision. Getting it wrong can have a devastating impact on a company’s bottom line and global reputation. These are the 10 factors to consider when choosing . depth of experience, dedicated mitigation capacity, and human expertise on the front lines of the fight against DDoS. All 10 are explained more thoroughly in the white paper.
http://www.prolexic.com/knowledge-center-ddos-attack-report-2013-q4/twitter.html?cvosrc=3rd%20Party.National%20Positions.AR-13-Q4 | Q4 2013 set new records for the frequency and size of DDoS attacks, with one notable attack peaking at 179 Gbps. This would be a crippling DDoS attack for most organizations. Q4 also saw significant growth in the misuse of the CHARGEN and NTP protocols in distributed reflection DDoS attacks, while mobile devices started to play a significant role in an attack campaigns. Get more DDoS attack stats and trends in this short podcast (2:51).
http://www.prolexic.com | Recent years have marked a significant rise in distributed denial of service (DDoS) activity from Asia with targets within the region and around the world. Prolexic has observed malicious actors compromising Chinese and other Asian IT resources and using them as command and control (CnC) and zombies in DDoS botnets. In fact, in Q4 2013, six the top ten source countries for DDoS activity were in Asia. Learn more about the Asian DDoS threat in this podcast. (2:37)}
http://www.prolexic.com Multi-vector DDoS attack campaigns make DDoS mitigation more difficult. Multiple attack vectors make it less likely the attack can be blocked with automated devices. In addition, the DDoS mitigation team has to track more details and to fight the attack on multiple fronts simultaneously. In this podcast, Prolexic examines a Q4 2013 DDoS attack that involved a dozen attack vectors, and explains how they fought back. (2:37)
http://www.prolexic.com/services-dos-and-ddos-mitigation.html | DDoS mitigation appliances alone are not enough to stop today’s large, brute force DDoS attacks. Attackers can overwhelm and sidestep static devices in several ways. In Prolexic’s experience, most tools available today to fight against DDoS attacks are missing the most important part of the solution – the experience of an expert security engineer. In this short podcast, Prolexic explains why you need human security expertise in today’s threat landscape (2:42).
http://www.prolexic.com | In a recent survey, online retailers shared their opinions on the Distributed Denial of Service (DDoS) threat landscape, the likelihood of attacks and the reliability of various DDoS protection and mitigation options. Get the survey results in this short podcast (2:35)
http://www.prolexic.com | SYN reflection attacks are one of the more sophisticated distributed denial of service (DDoS) attack methods and typically require some skill to execute. However, they have recently grown in popularity as they have become available as a DDoS-as-a-Service application from the criminal underground. Now even novices can launch a SYN reflection attack. Learn more about this threat in this podcast. (2:45)
A growing trend in cyber attacks are distributed reflection denial of service (DrDos) which leverage IP-based devices such as printers and routers. By taking advantage of the functionality of the SNMP, NTP and CHARGEN protocols, attackers can turn mild-mannered network devices into malicious attacking bots. Learn more about this threat in this podcast. (2:31)
Distributed Denial of Service (DDoS) attacks can damage your business, so it’s important to take preventive steps to defend against these events. You should hire a DDoS mitigation service and, in cooperation with it, run tests to ensure that your system is adequately protected. In addition, you should devise a policy that informs personnel of their duties and responsibilities during a DDoS cyberattack. Businesses should interview their DDoS mitigation service to confirm that it can properly defend against DDoS attacks.Prolexic provides a variety of tools and services to mitigate this increasingly common threat.