DDoS attack turns servers into bots
A new distributed denial of service attack has been discovered that uses servers to distribute rather than PCs.
Security experts have warned of a new distributed denial of service (DDoS) attack that targets full on web servers rather than individual PCs.
The hackers infect servers with an application and, through a very simple software program, are able to identify the URLs they want to attack and hit them in a click of a button.
Imperva, the security firm which discovered the attacks, has the source code for the original application, along with screenshots, showing it only contained 90 lines of PHP code.
"Although servers are typically harder to compromise than PCs, by capitalising on their greater horsepower, the hackers create a much more efficient and powerful DDoS tool using servers as the attack platform," said Imperva in a statement.
"By using web servers, the attackers are even less detectable. Trace backs typically lead to a lone server at a random hosting company."
Amichai Shulman, chief technology officer at Imperva, has claimed that unlike most DDoS attacks, this is not a one off and the attacks "will be ongoing."
He advises companies to be on the look out and monitor Google presence to check if they have been compromised.
Get the ITPro. daily newsletter
Receive our latest news, industry updates, featured resources and more. Sign up today to receive our FREE report on AI cyber crime & security - newly updated for 2024.
Jennifer Scott is a former freelance journalist and currently political reporter for Sky News. She has a varied writing history, having started her career at Dennis Publishing, working in various roles across its business technology titles, including ITPro. Jennifer has specialised in a number of areas over the years and has produced a wealth of content for ITPro, focusing largely on data storage, networking, cloud computing, and telecommunications.
Most recently Jennifer has turned her skills to the political sphere and broadcast journalism, where she has worked for the BBC as a political reporter, before moving to Sky News.
Want developers to build secure software? You need to ditch these two programming languages
Sundar Pichai says more than 25% of Google's code is now generated by AI – and it's a big glimpse into the future of software development
HPE ProLiant MicroServer Gen11 review: A smart little server for small spaces