{"id":13941,"date":"2016-10-24T09:37:53","date_gmt":"2016-10-24T09:37:53","guid":{"rendered":"http:\/\/www.biphoo.com\/bipnews\/?p=13941"},"modified":"2016-10-24T09:41:08","modified_gmt":"2016-10-24T09:41:08","slug":"hackers-used-new-weapons-to-disrupt-major-websites-across-usa","status":"publish","type":"post","link":"https:\/\/www.biphoo.com\/bipnews\/technology\/internet\/hackers-used-new-weapons-to-disrupt-major-websites-across-usa.html","title":{"rendered":"Hackers Used New Weapons to Disrupt Major Websites Across USA"},"content":{"rendered":"

Hackers Used New Weapons to Disrupt Major Websites Across USA<\/span><\/strong><\/span><\/h2>\n

Hackers Used New Weapons to Disrupt Major Websites Across USA.:-<\/strong> Major websites were inaccessible to people across wide swaths of the United States on Friday after a company that manages crucial parts of the internet\u2019s infrastructure said it was under attack.<\/span><\/p>\n

Users reported sporadic problems reaching several websites, including Twitter, Netflix, Spotify, Airbnb, Reddit, Etsy, SoundCloud and The New York Times.<\/span><\/p>\n

The company, Dyn, whose servers monitor and reroute internet traffic, said it began experiencing what security experts called a distributed denial-of-service attack just after 7 a.m. Reports that many sites were inaccessible started on the East Coast, but spread westward in three waves as the day wore on and into the evening.<\/span><\/p>\n

And in a troubling development, the attack appears to have relied on hundreds of thousands of internet-connected devices like cameras, baby monitors and home routers that have been infected \u2014 without their owners\u2019 knowledge \u2014 with software that allows hackers to command them to flood a target with overwhelming traffic.<\/span><\/p>\n

A spokeswoman said the Federal Bureau of Investigation and the Department of Homeland Security were looking into the incident and all potential causes, including criminal activity and a nation-state attack.<\/span><\/p>\n

Kyle York, Dyn\u2019s chief strategist, said his company and others that host the core parts of the internet\u2019s infrastructure were targets for a growing number of more powerful attacks.<\/span><\/p>\n

\u201cThe number and types of attacks, the duration of attacks and the complexity of these attacks are all on the rise,\u201d Mr. York said.<\/span><\/p>\n

Security researchers have long warned that the increasing number of devices being hooked up to the internet, the so-called Internet of Things, would present an enormous security issue. And the assault on Friday, security researchers say, is only a glimpse of how those devices can be used for online attacks.<\/span><\/p>\n

Dyn, based in Manchester, N.H., said it had fended off the assault by 9:30 a.m. But by 11:52 a.m., Dyn said it was again under attack. After fending off the second wave of attacks, Dyn said at 5 p.m. that it was again facing a flood of traffic.<\/span><\/p>\n

A distributed denial-of-service attack, or DDoS, occurs when hackers flood the servers that run a target\u2019s site with internet traffic until it stumbles or collapses under the load. Such attacks are common, but there is evidence that they are becoming more powerful, more sophisticated and increasingly aimed at core internet infrastructure providers.<\/span><\/p>\n

Going after companies like Dyn can cause far more damage than aiming at a single website.<\/span><\/p>\n

Dyn is one of many outfits that host the Domain Name System, or DNS, which functions as a switchboard for the internet. The DNS translates user-friendly web addresses like fbi.gov into numerical addresses that allow computers to speak to one another. Without the DNS servers operated by internet service providers, the internet could not operate.<\/span><\/p>\n

In this case, the attack was aimed at the Dyn infrastructure that supports internet connections. While the attack did not affect the websites themselves, it blocked or slowed users trying to gain access to those sites.<\/span><\/p>\n

Mr. York, the Dyn strategist, said in an interview during a lull in the attacks that the assaults on its servers were complex.<\/span><\/p>\n

\u201cThis was not your everyday DDoS attack,\u201d Mr. York said. \u201cThe nature and source of the attack is still under investigation.\u201d<\/span><\/p>\n

Later in the day, Dave Allen, the general counsel at Dyn, said tens of millions of internet addresses, or so-called I.P. addresses, were being used to send a fire hose of internet traffic at the company\u2019s servers. He confirmed that a large portion of that traffic was coming from internet-connected devices that had been co-opted by type of malware, called Mirai.<\/span><\/p>\n

Dale Drew, chief security officer at Level 3, an internet service provider, found evidence that roughly 10 percent of all devices co-opted by Mirai were being used to attack Dyn\u2019s servers. Just one week ago, Level 3 found that 493,000 devices had been infected with Mirai malware, nearly double the number infected last month.<\/span><\/p>\n

Mr. Allen added that Dyn was collaborating with law enforcement and other internet service providers to deal with the attacks.<\/span><\/p>\n

In a recent report, Verisign, a registrar for many internet sites that has a unique perspective into this type of attack activity, reported a 75 percent increase in such attacks from April through June of this year, compared with the same period last year.<\/span><\/p>\n

The attacks were not only more frequent, they were bigger and more sophisticated. The typical attack more than doubled in size. What is more, the attackers were simultaneously using different methods to attack the company\u2019s servers, making them harder to stop.<\/span><\/p>\n

The most frequent targets were businesses that provide internet infrastructure services like Dyn.<\/span><\/p>\n

\u201cDNS has often been neglected in terms of its security and availability,\u201d Richard Meeus, vice president for technology at Nsfocus, a network security firm, wrote in an email. \u201cIt is treated as if it will always be there in the same way that water comes out of the tap.\u201d<\/span><\/p>\n

Last month, Bruce Schneier, a security expert and blogger, wrote on the Lawfare blog that someone had been probing the defenses of companies that run crucial pieces of the internet.<\/span><\/p>\n

\u201cThese probes take the form of precisely calibrated attacks designed to determine exactly how well the companies can defend themselves, and what would be required to take them down,\u201d Mr. Schneier wrote. \u201cWe don\u2019t know who is doing this, but it feels like a large nation-state. China and Russia would be my first guesses.\u201d<\/span><\/p>\n

It is too early to determine who was behind Friday\u2019s attacks, but it is this type of attack that has election officials concerned. They are worried that an attack could keep citizens from submitting votes.<\/span><\/p>\n

Thirty-one states and the District of Columbia allow internet voting for overseas military and civilians. Alaska allows any Alaskan citizen to do so. Barbara Simons, the co-author of the book \u201cBroken Ballots: Will Your Vote Count?\u201d and a member of the board of advisers to the Election Assistance Commission, the federal body that oversees voting technology standards, said she had been losing sleep over just this prospect.<\/span><\/p>\n

\u201cA DDoS attack could certainly impact these votes and make a big difference in swing states,\u201d Dr. Simons said on Friday. \u201cThis is a strong argument for why we should not allow voters to send their voted ballots over the internet.\u201d<\/span><\/p>\n

This month the director of national intelligence, James Clapper, and the Department of Homeland Security accused Russia of hacking the Democratic National Committee, apparently in an effort to affect the presidential election. There has been speculation about whether President Obama has ordered the National Security Agency to conduct a retaliatory attack and the potential backlash this might cause from Russia.<\/span><\/p>\n

Gillian M. Christensen, deputy press secretary for the Department of Homeland Security, said the agency was investigating \u201call potential causes\u201d of the attack.<\/span><\/p>\n

Vice President Joseph R. Biden Jr. said on the NBC News program \u201cMeet the Press\u201d this month that the United States was prepared to respond to Russia\u2019s election attacks in kind. \u201cWe\u2019re sending a message,\u201d Mr. Biden said. \u201cWe have the capacity to do it.\u201d<\/span><\/p>\n

But technology providers in the United States could suffer blowback. As Dyn fell under recurring attacks on Friday, Mr. York, the chief strategist, said such assaults were the reason so many companies are pushing at least parts of their infrastructure to cloud computing networks, to decentralize their systems and make them harder to attack.<\/span><\/p>\n

Source:-\u00a0http:\/\/www.nytimes.com\/2016\/10\/22\/business\/internet-problems-attack.html?ref=technology<\/span><\/p>\n

\n\t\t\t
\n\t\t\t <\/div><\/div>\n\t\t