Feeds

JPMorgan Chase is latest US bank in MYSTERY web savaging

Islamic 'Cyber Fighters' back for more dotcom beatings?

Protecting against web application threats using SSL

JPMorgan Chase's website went kaput yesterday when the bank became the latest US financial institution to find itself on the business end of a distributed denial-of-service assault.

Visitors to chase.com were shown a "website temporarily down" message on the front page, although the bank's mobile apps were said to be working.

Iran and a group of Islamic activists called the Izz ad-Din al-Qassam Cyber Fighters have been linked to internet attacks on major American banks, including US Bancorp, Citigroup, Wells Fargo and Bank of America.

The hacktivists claimed responsibility for a series of distributed denial-of-service attacks that hit those financial organisations in September, and declared JPMorgan Chase, SunTrust and PNC Financial Services Group were all possible targets for a second stage in its operations.

"In new phase, the wideness and the number of attacks will increase explicitly; and offenders and subsequently their governmental supporters will not be able to imagine and forecast the widespread and greatness of these attacks," the group said in a statement posted on the Pastebin website in December.

the Cyber Fighters said that the reason for the computer network offensive was the continued availability of the inflammatory Innocence of Muslims video on YouTube. However, when the video was taken down, the group said it had suspended its attacks.

A former American government official claimed earlier this year that Iran was orchestrating the attacks. James Lewis of the Centre for Strategic and International Studies in Washington believed that the aim was retaliation over the nuclear-fuel-centrifuge-knackering virus Stuxnet and other cyber-barrages against Iran.

JPMorgan Chase's site now appears to be working, although DDoS attacks can result in intermittent service. In December, Wells Fargo customers had trouble using the bank's site for at least four days as it dropped in and out of view. But security experts have said that there's no real evidence to show that Iranian officials are behind the campaign. ®

Reducing the cost and complexity of web vulnerability management

More from The Register

next story
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
Early result from Scots indyref vote? NAW, Jimmy - it's a SCAM
Anyone claiming to know before tomorrow is telling porkies
TOR users become FBI's No.1 hacking target after legal power grab
Be afeared, me hearties, these scoundrels be spying our signals
Jihadi terrorists DIDN'T encrypt their comms 'cos of Snowden leaks
Intel bods' analysis concludes 'no significant change' after whistle was blown
Home Depot: 56 million bank cards pwned by malware in our tills
That's about 50 per cent bigger than the Target tills mega-hack
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
China hacked US Army transport orgs TWENTY TIMES in ONE YEAR
FBI et al knew of nine hacks - but didn't tell TRANSCOM
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.