Article View: comp.security.firewalls
Article #79Local servers used in attack on Whitehouse.
From: Michael Scheidell
Date: Mon, 07 May 2001 14:30
Date: Mon, 07 May 2001 14:30
46 lines
3189 bytes
3189 bytes
All of us who frequent these newsgroups are fully aware of the need for internet security. We even try to make sure that people understand the need for security on even small home computers. Take this weekend and today for an example: Chinese hackers have broken into dozens of small computers, unprotected linux boxes, windows boxes, proxy servers and routers and have launched a Distributed Denial of service attack on CNN, Whitehouse.gov, nasa new your times and others (I think I hear that GRC.com and zonealarm's web sites were under attack also) According to GARRY BARKER TECHNOLOGY EDITOR or theage.com in Australia, "On Friday night the official White House website was hit by massive data bombs in what technicians call a DDoS (distributed denial of service) attack, slowing it down for about six hours and totally blocking it for nearly three hours. A similar attack was mounted on the public CIA site, but though it slowed, it weathered the data storm. The FBI's National Infrastructure Protection Centre said Chinese hackers had publicly discussed increasing their activity with May 7, the second anniversary of the accidental bombing by the US of the Chinese embassy in Belgrade, suggested as a day of peak activity. Internet security experts around the US have been busy finding local server computers that had been hacked into and used in some of the attacks and by last night had shut down six of them. The identity and whereabouts of the hackers using those servers is not known." http://www.theage.com.au/news/2001/05/06/FFX7ETB9CMC.html Ah, if the isp's only took the mynetwatchman.com alerts more seriously! -- Michael Scheidell Florida Datamation, Inc. scheidell@fdma.com / 1+(561) 368-9561 Internet Security and Consulting See updated IT Security News at http://www.fdma.com/ After system Compromise : http://www.cert.org/tech_tips/
Technical Details
Message-ID:
<9d6bit$ooh$1@caerulus.cerintha.com>Path:
arc1-ca.pugleaf.net!newsfeed.google.com!newsfeed.stanford.edu!canoe.uoregon.edu!logbridge.uoregon.edu!feed2.news.rcn.net!rcn!fdma.com!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,bef6ca6a36007f08,start X-Google-Attributes: gidf922c,public X-Google-Thread: ff723,bef6ca6a36007f08,start X-Google-Attributes: gidff723,public X-Google-Thread: 1122a6,bef6ca6a36007f08,start X-Google-Attributes: gid1122a6,public X-Google-Thread: 10090f,bef6ca6a36007f08,start X-Google-Attributes: gid10090f,public X-Google-ArrivalTime: 2001-05-07 07:45:03 PST Path: arc1-ca.pugleaf.net!newsfeed.google.com!newsfeed.stanford.edu!canoe.uoregon.edu!logbridge.uoregon.edu!feed2.news.rcn.net!rcn!fdma.com!not-for-mail From: "Michael Scheidell" <me2@privacy.net> Newsgroups: comp.security.firewalls,bellsouth.net.security,bellsouth.net.support.adsl,comp.security.misc Subject: Local servers used in attack on Whitehouse. Date: Mon, 7 May 2001 10:30:51 -0400 Organization: Florida Datamation, Inc. Lines: 49 Message-ID: <9d6bit$ooh$1@caerulus.cerintha.com> Reply-To: "Michael Scheidell" <scheidell@fdma.com> NNTP-Posting-Host: proxy.fdma.com X-Trace: caerulus.cerintha.com 989245853 25361 216.241.67.67 (7 May 2001 14:30:53 GMT) X-Complaints-To: abuse@fdma.com NNTP-Posting-Date: 7 May 2001 14:30:53 GMT X-Newsreader: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200