Feeds

Spamhaus DDoS blamed on shady Russian hosts, not Anonymous

Da svidaniya, kamerad: Traditional enemies fingered in weekend packet flood

Securing Web Applications Made Simple and Scalable

Anti-spam organisation Spamhaus has recovered from a denial of service attack over the weekend.

Initially though, Spamhaus may have been attacked in response to its warning that a WikiLeaks mirror called WikiLeaks.info was being hosted by a Russian bullet-proof hosting outfit, called Webalta, that also played home to phishing, carding and malware sites. Spamhaus advised users to use a safer mirror, WikilLeaks.ch, instead. Trend Micro harboured similar concerns over WikiLeaks.info's association with Webalta and its reseller Heihachi.net, described by Trend as a "safe haven for criminals and fraudsters".

WikiLeaks.info, a site only loosely affiliated with the main WikiLeaks site, got the hump at this, arguing there was no malware on its sites and speculating that political pressure might have been applied towards Spamhaus.

Spamhaus began receiving the odd threatening email from individuals who had affiliated themselves with Anonymous, so when a denial of service attack began on Saturday it was natural to assume at first that the site was under attack from (more than a little misguided) hacktivists.

However, analysis of the attack traffic showed marked differences from the LOIC packet-flooding tool used by Anonymous. Instead the attack consisted of UDP and Syn flood packets, sent from a botnet of compromised PCs. In addition, discussions on Anon's message board revealed that Spamhaus was not a target for attack and that its explanation of its warning about WikiLeaks.info was understood as intended.

So rather than an attack by Anons, Spamhaus reckons it came under attack by the Heihachi group as a revenge against bringing its nefarious activities to wider attention, as it explains here.

Spamhaus, which tracks the activities of black-hat hackers, botmasters, spammers and other internet pond life is no stranger to denial of service attacks from this type of quarter. ®

Mobile application security vulnerability report

More from The Register

next story
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
LibreSSL RNG bug fix: What's all the forking fuss about, ask devs
Blow to bit-spitter 'tis but a flesh wound, claim team
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
NUDE SNAPS AGENCY: NSA bods love 'showing off your saucy selfies'
Swapping other people's sexts is a fringe benefit, says Snowden
Own a Cisco modem or wireless gateway? It might be owned by someone else, too
Remote code exec in HTTP server hands kit to bad guys
British data cops: We need greater powers and more money
You want data butt kicking, we need bigger boots - ICO
Crooks fling banking Trojan at Japanese smut site fans
Wait - they're doing online banking with an unpatched Windows PC?
NIST told to grow a pair and kick NSA to the curb
Lrn2crypto, oversight panel tells US govt's algorithm bods
prev story

Whitepapers

Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.