Iranian hacktivists hand-crank DDoS attack
Farsi hackers do without botnets
Regcast training : Hyper-V 3.0, VM high availability and disaster recovery
The controversial outcome of the Iranian elections has spawned a parallel conflict on the internet.
The cyberconflict is more akin to hand-to-hand fighting than the more sophisticated botnet-powered assualts that have accompanied political conflicts involving Russia and its neighbours over recent months.
Cyber attacks against pro-Ahmadinejad (government) websites have largely been driven by hand, in sharp contrast to the botnet-fuelled attacks associated with cyberconflicts between Russia and Estonia, for example. Security watchers are describing the Iranian conflict as a "crowd sourced cyber-war", featuring DIY denial of service attack tools, web page “refresher” tools and PHP scripts, security blogger Dancho Danchev reports.
"Rather than using simple code, with automated viral botnets and the like, these efforts are largely being driven by hand. There are a number of simple scripts going around that can be downloaded and which continually reload the target Web sites in a browser window," said Jim Cowie, CTO of security tools firm Renesys, Net Effect reports.
Although there is little or no DDoS traffic against opposition websites, they too are being affected because of government-imposed limits of Iranian international bandwidth. Iran all but cut off international data links after last week's election and has only slowly reactivated external circuits since, Arbor Networks reports. In response to the attacks, some websites have applied low-bandwidth versions.
The DDoS attacks, in their current form, are basic and straightforward to thwart, ISC reports. In addition, they carry security risks for hacktivists tempted to get involved.
"The attackers who participate by loading these pages and going off to dinner, sleep, or on with their days open themselves up to attacks back through drive-by attacks," writes Jose Nazario, manager of security research at Arbor Networks.
"Imagine a simple scenario: the victims modify their sites to include some code like LuckySploit that commits a simple set of attacks. The attacker’s machine reloads the page (this is, after all, part of the attack). Hit a browser or accessory bug and bam, the attacker has been attacked." ®
COMMENTS
Re:Public relations?
"I tend to think putting basiji snipers on rooftops to shoot kids down in the street means the Iranian government is not especially concerned about public relations at this time."
Why, Israel have been doing that a couple times per week for the past 20 years, and their PR strategy is still very efficient... maybe -just maybe- it depends on which images are shown?
actually
"I tend to think putting basiji snipers on rooftops to shoot kids down in the street means the Iranian government is not especially concerned about public relations at this time."
I think they are exactly concerned with public relations. Shooting citizens, but not openly on TV means the news spreads by word of mouth. It will spread and it will bring fear. But you can't prosecute based on word of mouth, plus it has the element of exaggeration. The other countries are afraid to do anything, and soon the local Iranians will be to afraid to protest as well.
re: That's why you run the PHP script
Wget is also useful for downloading web pages. I myself have used it to download pages which I suspected were redirecting users to malware sites, and for downloading pages at those suspected malware sites for confirmation. There was no way I was going to visit those pages with any browser, no matter how secure it may appear to be.

IT infrastructure monitoring strategies
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Steps to Take Before Choosing a Business Continuity Partner
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider