Hackers slow Internet root servers with attack
230551
(InfoWorld) - Online attackers have briefly disrupted service on at least two of the 13 "root" servers that are used to direct traffic on the Internet. The attack, which began Tuesday at about 5:30 a.m. Eastern time, was the most significant attack against the root servers since an October 2002 DDoS attack, said Ben Petro, senior vice president of services with Internet service provider Neustar. Root servers manage the Internet's DNS, used to translate Web addresses such as Amazon.com into the numerical IP addresses used by machines. The attack appeared to have been launched by a group of compromised PCs, called a botnet, Petro said. "Two of the root servers suffered badly, although they did not completely crash; some of the others also saw heavy traffic," said John Crain, chief technical officer with the Internet Corporation for Assigned Names and Numbers (ICANN). The two hardest-hit servers are maintained by the U.S. Department of Defense and ICANN, he added. The botnet briefly overwhelmed these servers with useless requests, causing them to occasionally hang, but did not disrupt Internet service, Petro said. By 10:30 a.m., Internet service providers were able to filter enough of the traffic from the botnet machines that traffic to and from the root servers was essentially back to normal. Compared to other DDoS attacks, this one did not have a lot of firepower. Petro said the bandwidth of the attack could be measured in megabytes, as opposed to the gigabyte-level attacks that are now frequently seen. "It was a small attack, but it was focused and targeted at the roots," he said. It is unclear where the attack originated, Crain said. "The effect of this traffic on the end users was negligible," he added. Petro said engineers are still "scratching their heads" about the reason for the attack. Although some DDoS attacks are launched for political reasons or to extort money from Web site owners, this one appeared to have no such purpose, he said. Crain ventured a guess as to the attack's effect, however. "I suspect that the largest effect of the DNS traffic was to deprive some engineers of sleep and generate press," he wrote.
189507
A mass attack ongoing for the past month against Linux Apache Web servers has become increasingly successful, according to a security researcher monitoring its progress.
90728
A new variant of the Santy worm, which attacks Web pages usuing the PHP bulletin board software, appeared this week. Earlier variants used Google to find vulnerable Web pages; the new
406027
Microsoft ISA and Proxy Server are prone to an Internet domain name spoofing vulnerability that could allow an attacker to spoof Internet sites.
666009
Good-guy sites, like CastleCops.com, are suffering Web site outages from distributed denial-of-service attacks.
716663
Networked multifunction devices share PC vulnerabilities to worms, hackers.
744409
Security researchers release code that shows how a pair of widely used technologies could be misused to take control of a victim's Web browsing experience.
81976
Recently discovered vulnerability allows hackers to use Web graphics to launch attacks.
367869
A hacked server in Germany fed malicious code to unsuspecting Internet Explorer users at an unknown number of Web sites for several hours over the weekend, a banner ad-serving company acknowledged Monday.
384130
Hackers could exploit the vulnerabilities to launch DOS attacks and bypass user authentication on the servers.
591513
Phreaks, spoofers and spammers want to invade your home computer, and the tricks of their trade include airsnarfs, wabbits and fork bombs.
527510
Researchers looking to root out computer attacks hope that speed kills.
243710
By TED BRIDIS Associated Press  WASHINGTON -- Hackers briefly overwhelmed at least three of the 13 computers that help manage global computer traffic Tuesday in one of the most significant attacks against the Internet since 2002.
11481
&quot;Many home users&#39; computers are sending out spam because they have had their broadband Internet connections exploited by remote hackers.
143995
A sophisticated hacking scheme seen early last year appears to be affecting an increasing number of Web servers.
542850
A directory reversal within "flat" extensions could lead to system profile attacks.
430066
During the course of this weekend, hackers found an ingenious way to attack Microsoftâs ubiquitous Internet Explorer: compromise an ad networkâs servers.