PDA

Просмотр полной версии : Looks Like A Yakuza DDOS Attack


Fugitif
03.06.2008, 00:59
Looks Like A Yakuza DDOS Attack

http://www.yomiuri.co.jp/dy/national/20080601TDY01305.htm

(((The thing that makes me suspect the Yakuza is that polite protection-shakedown method of "Gosh, did 'somebody' bust-up your places of business here? We can fix that for you!" Normal DDOS'ers just rumble in from Russia and say, "okay, pony up or the web-traffic is toast.")))
Link: Botnet cyber-attack costs company 300 million yen : National : DAILY YOMIURI ONLINE (The Daily Yomiuri).

Botnet cyber-attack costs company 300 million yen

Kenichiro Tanaka Yomiuri Shimbun Staff Writer

A type of blackmail is increasing in Japan in which a blackmailer bombards companies' Web sites with data sent from tens of thousands of virus-infected personal computers to hamper browsing of their sites.

Attackers demand money in return for stopping their cyber-attacks. A source said one major Tokyo company suffered more than 300 million yen in damage because access to its site was halted for a week due to the repeated "denial of service" attacks.

Net security firms have issued an alert over this new type of blackmail. (((It's not very "new," except, presumably, in Japan.)))

On Dec. 27, it became impossible to browse the Tokyo company's site for its normal offerings of travel, bar and restaurant information and the sale of daily commodities. Immediately afterward, a person claiming to be from a Net security company sent a e-mail in Japanese to the site operator.

The mail read: "Is your company's Web site still inaccessible? There is a problem with your site so we're offering to fix it. The repair fee is 480,000 yen. If you don't pay the fee, you may suffer [further] attacks."

The denial-of-service attacks continued for a week as the site operator ignored the perpetrator's demand for money.

A check of communication records found the denial-of-service attack had sent data at a rate of as much as 6 gigabytes a second. This means that tens of thousands of personal computers were accessing the site simultaneously, causing the operator's telecommunication lines to break down.

The attacks were made by a botnet, a remote-controlled network of "zombie" computers that transmitted data to other computers without the computer owners being aware of it.

The attacker aims to stop a target company providing an online service by directing many computers to simultaneously access a target site or tie up the site's resources by making it process information repeatedly.

Although the exact circumstances of the case of the Tokyo company in question are unknown, the botnet attacks were found to originate mainly in China, or via a server there.....

From:

http://blog.wired.com/sterling/2008/06/looks-like-a-ya.html