Spamhaus Under DDOS attack
Spamhaus's web servers came under a DDoS attack starting yesterday atjust after 21:00 GMT. The attack is being carried out by the same people
responsible for the BlueSecurity DDoS last year, using the Storm malware.
The attack method was sufficiently different to previous DDoS attacks on
us that some of it got through our normal anti-DDoS defenses and halted
our web servers.
At 02:00 GMT we got the attack under control and our web servers are now
back up, www.spamhaus.org is running again as normal.
The attack is ongoing, but it's being absorbed by anti-DDoS defenses.
Also under attack by the same gang are SURBL and URIBL.
Storm is the 'nightmare' botnet, capable of taking out government
facilities and causing much mayhem on the internet. It has 3 functions;
sending spam, fast-flux web and dns hosting mainly for stock scams, and
DDoS. There is a hefty international effort underway by cyber-forensics
teams in a joint effort by law enforcement and private sector botnet and
malware analysts to trace the perpetrators.
--
Steve Linford
The Spamhaus Project
http://www.spamhaus.org
Labels: Attack Tools, Botnet, DoS, Spam
<< Home