Inside a Mirai variant that learned to speak HTTP/2 (part 2)
We get asked about inside a Mirai variant that learned to speak HTTP/2 more than almost anything else, so here is the long answer.The economics behind itA booter service rents out a…
Threat Intelligence
Threat Bulletin 0075: search endpoint flood against a tax authority portal platform in Central Europe
search endpoint flood against a tax authority portal platform in Central Europe, peaking at 820.4 million requests per second. Mitigated in 0.945 seconds.
Threat Bulletin 0074: TLS handshake exhaustion against a healthcare portal platform in Southeast Asia
TLS handshake exhaustion against a healthcare portal platform in Southeast Asia, peaking at 599.4 million requests per second. Mitigated in 0.371 seconds.
Threat Bulletin 0073: UDP reflection (NTP) against a fashion retail platform in Latin America
UDP reflection (NTP) against a fashion retail platform in Latin America, peaking at 208.2 Gbps. Mitigated in 0.777 seconds.
Threat Bulletin 0072: UDP reflection (DNS) against a tax authority portal platform in Southeast Asia
UDP reflection (DNS) against a tax authority portal platform in Southeast Asia, peaking at 32.3 Gbps. Mitigated in 0.079 seconds.
Threat Bulletin 0071: UDP reflection (DNS) against a airline booking platform in Southeast Asia
UDP reflection (DNS) against a airline booking platform in Southeast Asia, peaking at 66.9 Gbps. Mitigated in 0.732 seconds.
Threat Bulletin 0070: WebSocket connection flood against a video streaming platform in Latin America
WebSocket connection flood against a video streaming platform in Latin America, peaking at 952.2 million requests per second. Mitigated in 0.325 seconds.
Threat Bulletin 0069: memcached amplification against a video streaming platform in Central Europe
memcached amplification against a video streaming platform in Central Europe, peaking at 65.6 Gbps. Mitigated in 0.208 seconds.
Inside a Mirai variant that learned to speak HTTP/2
We get asked about inside a Mirai variant that learned to speak HTTP/2 more than almost anything else, so here is the long answer.Measuring successWe track three numbers for every incident: time…
Threat Bulletin 0068: WebSocket connection flood against a fashion retail platform in Western Europe
WebSocket connection flood against a fashion retail platform in Western Europe, peaking at 956.3 million requests per second. Mitigated in 0.172 seconds.
Threat Bulletin 0067: SYN flood against a fashion retail platform in the Middle East
SYN flood against a fashion retail platform in the Middle East, peaking at 244.1 Gbps. Mitigated in 0.648 seconds.
Threat Bulletin 0066: HTTP POST flood against a sports betting platform in North America
HTTP POST flood against a sports betting platform in North America, peaking at 615.4 million requests per second. Mitigated in 0.244 seconds.