🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #79

Local servers used in attack on Whitehouse.

#79
From: Michael Scheidell
Date: Mon, 07 May 2001 14:30
46 lines
3189 bytes
All of us who frequent these newsgroups are fully aware of the need for
internet security.
We even try to make sure that people understand the need for security on
even small home computers.

Take this weekend and today for an example:

Chinese hackers have broken into dozens of small computers, unprotected
linux boxes, windows boxes, proxy servers and routers and have launched a
Distributed Denial of service attack on CNN, Whitehouse.gov, nasa new your
times and others
(I think I hear that GRC.com and zonealarm's web sites were under attack
also)

According to GARRY BARKER TECHNOLOGY EDITOR or theage.com in Australia,

"On Friday night the official White House website was hit by massive data
bombs in what technicians call a DDoS (distributed denial of service)
attack, slowing it down for about six hours and totally blocking it for
nearly three hours.

A similar attack was mounted on the public CIA site, but though it slowed,
it weathered the data storm.

The FBI's National Infrastructure Protection Centre said Chinese hackers had
publicly discussed increasing their activity with May 7, the second
anniversary of the accidental bombing by the US of the Chinese embassy in
Belgrade, suggested as a day of peak activity.

Internet security experts around the US have been busy finding local server
computers that had been hacked into and used in some of the attacks and by
last night had shut down six of them. The identity and whereabouts of the
hackers using those servers is not known."

http://www.theage.com.au/news/2001/05/06/FFX7ETB9CMC.html

Ah, if the isp's only took the mynetwatchman.com alerts more seriously!


--
Michael Scheidell
Florida Datamation, Inc.
scheidell@fdma.com / 1+(561) 368-9561
Internet Security and Consulting
See updated IT Security News at http://www.fdma.com/
After system Compromise : http://www.cert.org/tech_tips/
Technical Details
Message-ID: <9d6bit$ooh$1@caerulus.cerintha.com>
Path: arc1-ca.pugleaf.net!newsfeed.google.com!newsfeed.stanford.edu!canoe.uoregon.edu!logbridge.uoregon.edu!feed2.news.rcn.net!rcn!fdma.com!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,bef6ca6a36007f08,start
X-Google-Attributes: gidf922c,public
X-Google-Thread: ff723,bef6ca6a36007f08,start
X-Google-Attributes: gidff723,public
X-Google-Thread: 1122a6,bef6ca6a36007f08,start
X-Google-Attributes: gid1122a6,public
X-Google-Thread: 10090f,bef6ca6a36007f08,start
X-Google-Attributes: gid10090f,public
X-Google-ArrivalTime: 2001-05-07 07:45:03 PST
Path: arc1-ca.pugleaf.net!newsfeed.google.com!newsfeed.stanford.edu!canoe.uoregon.edu!logbridge.uoregon.edu!feed2.news.rcn.net!rcn!fdma.com!not-for-mail
From: "Michael Scheidell" <me2@privacy.net>
Newsgroups: comp.security.firewalls,bellsouth.net.security,bellsouth.net.support.adsl,comp.security.misc
Subject: Local servers used in attack on Whitehouse.
Date: Mon, 7 May 2001 10:30:51 -0400
Organization: Florida Datamation, Inc.
Lines: 49
Message-ID: <9d6bit$ooh$1@caerulus.cerintha.com>
Reply-To: "Michael Scheidell" <scheidell@fdma.com>
NNTP-Posting-Host: proxy.fdma.com
X-Trace: caerulus.cerintha.com 989245853 25361 216.241.67.67 (7 May 2001 14:30:53 GMT)
X-Complaints-To: abuse@fdma.com
NNTP-Posting-Date: 7 May 2001 14:30:53 GMT
X-Newsreader: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200