DDoS attacks on the rise.

Recent News | Posted by Dave
May 04 2009

(WEB HOST INDUSTRY REVIEW) — The past few months has seen a rise in large distributed denial of service attacks which threaten to send entire countries offline, raising concerns among Internet security experts in the Internet infrastructure that help contribute to these attacks, according to a report by The Washington Post.

These DDoS attacks use botnets to send large amounts of spam to websites to the point where it cannot handle incoming traffic from its regular visitors.

In the past six months, DDoS monitoring firm Arbor Networks (www.arbornetworks.com) says it has witnessed a rise in the number, sophistication and size of these attacks, while perpetrators seem to be targeting larger ISPs.

Earlier this month, domain registrar Register.com was hit by a major DDoS attack that caused causing intermittent outages for about 48 hours.

The Post article also cites recent DDoS attacks against dedicated managed hosting provider The Planet, which it says was hit by a “massive” DDoS attack on April 6 and 7, as well as Brazillian ISP Telefonica, which lasted for several days.

Though DDoS attacks are typically seen as the work of cyber criminals who are seeking some kind of financial compensation in exchange for retreating these attacks.

All three of the aforementioned companies were performed in precise intervals over a period of days, according to The Post.

Experts say that the nature of these attacks suggest that the hackers were just showing off their malicious capabilities to attract media coverage in an effort to draw interest from criminals that would hire them for their services.

The domain name system contains many DDoS assault attack weaknesses, which is a key component of the Internet.

Since the global DNS system does not yet have a widely deployed system in place to confirm the location of an individual requesting a site’s location, it makes it harder to block DDoS attackers that lie about their location, according to The Post.

Additionally, there has also been a rise in the number of botnets used to attack networks has largely increased because of globally-spreadl viruses like the Conficker worm.

These attacks are significantly easier to defend against as inffective individuals can work with their ISP to find and drop traffic from the Internet source.

ISPs can also improve their defense against DDoS attacks by adopting long-established Internet best practices.

 

Source http://www.thewhir.com/web-hosting-news/050109_Internet_Sees_Rise_in_DDoS_Attacks

Walmart Data Breach – By Employees

Best Practices, Recent News | Posted by Dave
Apr 21 2009

Almost half of all malicous attacks are done by an internal entity.  Do your employees know how to protect their data?  Don’t guess, get security awareness training from Parameter (End Shameless Plug) :)

– Dave

 

Wal-Mart suffers breach in computer data
News
Monday, 20 April 2009 08:22
It has come to light that Wal-Mart has suffered a breach in its staff data system due to a former employee leaving their job with confidential records. The information is said to refer to 48,000 members of staff in the state of Illinois, America. Security of information has also been a source of several news stories here in the UK as govermnment ministers have accidentally leaked information through mishaps. The breach occurred in mid-2007 and has only just emerged in the media. The language of the documents exposed was generalised, projected and chain-wide, begging the question: how many people’s personal security has been compromised by this? Considering the chain employs 1.8 million members of staff, this is a large loss of personal information which may take the form of private co-ordinates, bank account details for payrolls, tax codes and details, etc.

The breach is feared to be more than localised and is being looked into by senior staff.

Twitter tormented by nettlesome computer program

Best Practices, Recent News, Uncategorized | Posted by Dave
Apr 13 2009

Twitter tormented by nettlesome computer program

Unwelcome computer program disrupts the chatter on Twitter, adding to service’s growing pains

  • Monday April 13, 2009, 3:24 pm EDT

SAN FRANCISCO (AP) — A nettlesome computer program that tormented Twitter over the weekend is another reminder of the challenges facing the rapidly growing online communications service.

The mischievous program, known as a “worm,” targeted Twitter’s network with four different attacks starting early Saturday and ending early Monday, according to Twitter co-founder Biz Stone.

The worm was a potentially malicious program designed to automatically reproduce itself once it’s clicked on. But Stone says it didn’t filch any personal information from the more than 6 million people with Twitter accounts.

Suprise! Crime is going up in a bad economy!

Recent News | Posted by Dave
Apr 09 2009

Report says online crime surging in recession

 

By Jason Szep

Reuters
Monday, March 30, 2009; 3:53 PM
 

BOSTON (Reuters) – Fraud on the Internet reported to U.S. authorities increased by 33 percent last year, rising for the first time in three years, and is surging this year as the recession deepens, federal authorities said on Monday.

Internet fraud losses reported in the United States reached a record high $264.6 million in 2008, according to a report released on Monday from the Internet Fraud Complaint Center, run by the FBI and the National White Collar Crime Center.

Online scams originating from across the globe — mostly from the United States, Canada, Britain, Nigeria and China — are gathering steam this year with a nearly 50 percent increase in complaints reported to U.S. authorities in March alone.

“2009 is shaping up to be a very busy year in terms of cyber-crime,” the report’s author, John Kane, told reporters in a telephone briefing.

Last year’s losses compared with $239.1 million in 2007 and dwarfs the $18 million of losses of 2001.

The most common complaint of 2008 was non-delivery of promised merchandise, followed by auction fraud, credit card fraud and investment scams, according to the report.

Of 275,284 complaints received by the center in 2008, some 72,940 were referred to U.S. law enforcement agencies for prosecution. Those referrals spiked this year with 40,000 in the first quarter alone, said Kane.

“It is our belief that these numbers, both the complaints filed and the dollars, represent just a small tip of the iceberg,” said Kane, managing director of the National White Collar Crime Center in Richmond, Virginia.

UNDERREPORTED CRIME

“Our own research suggests that as few as 15 percent of cases of cyber-fraud are being reported to crime control agencies,” he said.

Scammers in the United States comprised 66 percent of complaints referred to authorities, followed by Britain at 11 percent, Nigeria 7.5 percent, Canada 3 percent and China 1.6 percent. Within the United States, the bulk originated in California (16 percent), followed by New York and Florida.

Fraudulent sales on online auction sites like eBay Inc and classified sites like craigslist.com contributed to a 32 percent rise in the hottest area of online fraud — non-delivery of promised merchandise, the report said.

That area alone made up about 33 percent of all complaints serious enough to be referred to law enforcement.

Other important areas included investment scams such as mini-versions of the $65 billion Ponzi scheme committed by New York financier Bernard Madoff in which money from new investors is used to pay existing investors.

About 74 percent of the scams were through e-mail messages last year, especially spam, while about 29 percent used websites. But criminals were increasingly tapping new technologies such as social networking sites and instant messenger services, said Kane.

The report highlights one new “significant’ identity-theft scam involving e-mail messages that give the appearance of originating from the FBI but seek bank account information to help in investigations of money being transferred to Nigeria. Recipients of the e-mails are told they could be richly rewarded by cooperating.

The report said almost 80 percent of known perpetrators of online scams are male. Of those bringing complaints, nearly half are between the ages of 30 and 50. The median dollar loss was $931 per complaint, although the median losses for check fraud reached $3,000 and that for investment scams was $2,000.

(Editing by Bill Trott)