Feeds

AOL rebuts zombie network slur

Mr Clean

  • alert
  • submit to reddit

Build a business case: developing custom apps

AOL has described a report which brands it as running the most zombie infected network on the internet as "meaningless" because it fails to take into account its large user base. Security firm Prolexic reports that AOL was the biggest single source of DDoS attacks over the last six months, accounting for 11.3 per cent of attacks in the US and 5.3 per cent worldwide.

But AOL spokesman Andrew Weinstein argues that its 21.7m US members meant it had 40 per cent of the US market, so figures from Prolexic that 11 per cent of hostile attacks monitored in the US can be traced back to AOL's network meant the ISP had a lower than industry average infection rate. Barrett Lyon, CTO of Prolexic, conceded that AOL had a point. "Our figures didn't take into account per-capita user base but regardless more computers on AOL are attacking online sites than from any other network. Just because a home user subscribes to a reputable brand doesn’t mean they’re safe from the online criminal fraternity."

DDoS attacks are often launched from machines compromised by malware such as Agobot and Spybot that turn them into drones on zombie attack networks (AKA botnets). Access to these botnets is sold online to spammers, cyber-extortionists or other ne'er do wells. When used in a DDoS attack, these compromised machines can 'flood' a network with fake packets, preventing legitimate traffic from accessing a site.

The disruption compromised Windows PCs cause to the wider internet is a recognised problem. Recently, internet firms banded to together in an industry wide push dubbed Operation Spam Zombies to wipe zombies off the net. AOL is a leading member of this initiative. It has also placed increased emphasis on consumer security in its recent software releases.

Prolexic, a 30 strong security start-up based in Miami, said its report highlighted a significant change in the way DDoS attacks are being coordinated. Instead of focusing on Layer-3 TCP attacks, hackers are increasingly trying "advanced full connection based flood" attacks. This trend allowed it to discount spoofing (forged destination) assaults before considering the origin of the attacks its customer face, according to Prolexic's Lyon. ®

Related stories

UK under cyber blitz
Corporates focus on basics for IT security defences
Online gamers targeted in Korean MSN hack attack
Hackers plot to create massive botnet
ISPs urged to throttle spam zombies

Endpoint data privacy in the cloud is easier than you think

More from The Register

next story
14 antivirus apps found to have security problems
Vendors just don't care, says researcher, after finding basic boo-boos in security software
Microsoft's Euro cloud darkens: US FEDS can dig into foreign servers
They're not emails, they're business records, says court
'Things' on the Internet-of-things have 25 vulnerabilities apiece
Leaking sprinklers, overheated thermostats and picked locks all online
iWallet: No BONKING PLEASE, we're Apple
BLE-ding iPhones, not NFC bonkers, will drive trend - marketeers
Multipath TCP speeds up the internet so much that security breaks
Black Hat research says proposed protocol will bork network probes, flummox firewalls
Only '3% of web servers in top corps' fully fixed after Heartbleed snafu
Just slapping a patched OpenSSL on a machine ain't going to cut it, we're told
Plug and PREY: Hackers reprogram USB drives to silently infect PCs
BadUSB instructs gadget chips to inject key-presses, redirect net traffic and more
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
prev story

Whitepapers

7 Elements of Radically Simple OS Migration
Avoid the typical headaches of OS migration during your next project by learning about 7 elements of radically simple OS migration.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Solving today's distributed Big Data backup challenges
Enable IT efficiency and allow a firm to access and reuse corporate information for competitive advantage, ultimately changing business outcomes.
A new approach to endpoint data protection
What is the best way to ensure comprehensive visibility, management, and control of information on both company-owned and employee-owned devices?