Cyberattacks Archives

What is a Botnet Drone and How Does it Affect You?

Cyberattacks, Support

What is a DNS Attack and How Does it Affect You?

Cyberattacks, Support

A DNS (Domain Name System) is a protocol that translates a user-friendly domain name (eg. WhatIs.com) into a computer-friendly IP address (eg. 206.19.49.154).

DNS Attacks take of advantage of communication between clients and servers. There are many types of DNS Attacks including Zero Day Attack, Cache Poisoning, Denial of Service and Distributed Denial of Service, DNS Amplification, and Fast-Flux DNS.

Zero Day Attack: the attacker exploits a previously unknown vulnerability in the DNS protocol stack or DNS server software.

Cache Poisoning: The attacker corrupts a DSN server by replacing a legitimate IP address in the server’s cache with that of another, rogue address in order to redirect traffic to a malicious website, collect information or initiate another attack. Cache poisoning may also be referred to as DNS poisoning.

Denial of Service: An attack in which a malicious bot sends send more traffic to a targeted IP address than the programmers who planned its data buffers anticipated someone might send. The target becomes unable to resolve legitimate requests.

Distributed Denial of Service: The attacker uses a Botnet to generate massive amounts of resolution requests to a targeted IP address.

DNS Amplification: The attacker takes advantage of a DNS server that permits recursive lookups and uses recursion to spread his attack to other DNS servers.

Fast-Flux DNS: The attacker swaps DNS records in and out with extreme frequency in order redirect DNS requests and avoid detection.

Source: www.searchsecurity.techtarget.com

Read Full Article →

What is an NTP Service, and How Do the Mode 6 Queries it Receives Affect You?

Cyberattacks, Support

The remote NTP server responds to mode 6 queries (Mode 6 is the recommended protocol used to get status information from a running ntpd to configure some of its behaviors on the fly). Devices that respond to these queries have the potential to be used in NTP amplification attacks. An attacker sends a massive amount of mode 6 messages to a huge number of recipient servers or clients in your organization. A remote attacker could potentially exploit this, via a specially crafted mode 6 query, to cause a reflected denial of service condition. Reflection Denial of Service attacks makes use of a third party component to send the attack traffic to a victim, ultimately hiding the attackers’ own identity. The attackers send packets to the reflector servers with a source IP address set to their victim’s IP, indirectly overwhelming the victim with the response packets.

Sources: www.netsecaddict.com; www.security.radware.com

Read Full Article →

What is an SNMP Attack, and How Does it Affect You?

Cyberattacks, Support

An SNMP attack is a type of Distributed Denial of Service (DDoS) attack.

Instead of Domain Name Servers (DNS), SNMP attacks use the Simple Network Management Protocol (SNMP) – a common network management protocol used for configuring and collecting information from network devices like servers, hubs, switches, routers and printers.

SNMP attacks can generate attack volumes of hundreds of gigabits per second, which can be directed at targets from multiple broadband networks. Attacks are sometimes hours in duration and are highly disruptive to targets. SNMP attacks elicit a flood of responses to a single spoofed IP address. During an attack, the perpetrator sends out a large number of SNMP queries with a forged IP address (the victim’s) to numerous connected devices that, in turn, reply to that forged address. The attack volume grows as more and more devices continue to reply, until the target network is brought down under the collective volume of these SNMP responses.

Source: www.imperva.com

Read Full Article →

Skyway West

What is a Botnet Drone and How Does it Affect You?

What is a DNS Attack and How Does it Affect You?

What is an NTP Service, and How Do the Mode 6 Queries it Receives Affect You?

What is an SNMP Attack, and How Does it Affect You?

What is an RDP Service Exploit and How Does it Affect You?

What is an SSDP Service Exploit and How Does it Affect You?

What is a multicast DNS Service Exploit and How Does it Affect You?

What is an Open Portmapper Vulnerability and How Does it Affect You?

What is a NetBios Vulnerability and How Does it Affect You?

What is a Microsoft (MS) SQL Server Resolution Service Vulnerability and How Does it Affect You?

Pages

The Latest

What is a Botnet Drone and How Does it Affect You?

More