Feeds

DDos attack takes down White House Parody site

Mistaken identity?

  • alert
  • submit to reddit

Security for virtualized datacentres

The administrator of Whitehouse.org, a site which actually parodies George W, sent a message to a Securityfocus mailing listasking for advice on how the deal with a ping flood attack that he was then suffering.

Brooks Talley, of web hosting firm Frnk Technology Group, reported on Saturday that for the previous 13 hours his network had been besieged with a flood of incoming ICMP echo-requests, reaching up to 27Mbps in volume. He was able to drop these packets at his router but was searching for a better solution.

Talley wrote: "The funny part is that they are trying to flood the whitehouse.gov web site, but they are accidentally targeting whitehouse.org, my somewhat weak parody site.

"If there's anything worse than an attempted DoS attack, it's an attempted DoS attack based on mistaken identity," he added.

The real White House web site Whitehouse.gov, was taken offline on Friday for a couple of hours after coming under DDos assault, according to US reports.

Presidential aides have promised to review the attack to see what lessons, if any, might be learned from the incident.

The attack on the White House web site was part of a far wider series of assaults, according to an alert issued by the FBI on Saturday.

The FBI's National Infrastructure Protection Center (NIPC), the nation's top cybercops, said that "several sites" were subjected to a denial of service attack over the weekend using fragmented large UDP packets.

"Analysis indicates that this activity may be intended to bypass standard port/protocol blocking techniques, as certain major routing equipment manufacturer's products (read Cisco) will block the first fragment of a large UDP packet, but may not block subsequent packets, thereby permitting the denial of service to continue." ®

External links

FBI Alert: Ongoing DDoS Disruption Attempts
Pro-China hackers to pick up the pace

Related stories

Chinese crackers May attack US warns FBI
US China cyberwar is a self-fulfilling prophecy

Beginner's guide to SSL certificates

More from The Register

next story
FYI: OS X Yosemite's Spotlight tells Apple EVERYTHING you're looking for
It's on by default – didn't you read the small print?
Microsoft pulls another dodgy patch
Redmond makes a hash of hashing add-on
NOT OK GOOGLE: Android images can conceal code
It's been fixed, but hordes won't have applied the upgrade
Edward who? GCHQ boss dodges Snowden topic during last speech
UK spies would rather 'walk' than do 'mass surveillance'
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
'LulzSec leader Aush0k' found to be naughty boy not worthy of jail
15 months home detention leaves egg on feds' faces as they grab for more power
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.