Cyber-security’s dirty little secret: It’s not as bad as you think

And as for botnets … on their way out A new research report from the Global Commission on Internet Governance has reached a surprising conclusion: cyberspace is actually getting safer.…

Excerpt from:
Cyber-security’s dirty little secret: It’s not as bad as you think

A comparative view of cloud-based DDoS protection services

Six months ago we experienced a 30Gb/sec and 60M PPS attack that was targeting over 1000 IPs on our network. Although we eventually stopped the attack with the aid of our upstream providers, a number …

Continued here:
A comparative view of cloud-based DDoS protection services

Cisco Videoscape bug could bring endless repeats to your tellie

Cloudy PVR has denial of service problem, but the fix is in Cisco is asking Web broadcasters using its Videoscape TV-over-IP streaming product to get patching, after a denial-of-service vulnerability was found in the software.…

See more here:
Cisco Videoscape bug could bring endless repeats to your tellie

Three Israelis among dozens arrested in global sting on hacking forum

Israeli suspects include an Israeli Arab who is believed to have used his hacking prowess to assist a terror group hostile to Israel. Three Israelis – including an Arab Israeli accused of aiding a terror group – were arrested this week as part of a global sting led by the FBI against a hacking forum believed responsible for an unknown number of cybercrimes over the past several years, it was cleared for publication on Wednesday. The site www.Darkode.com” was taken down on Tuesday by a joint law enforcement effort led by the FBI in collaboration with Europol and law enforcement agencies in 18 countries, including the Israel Police cybercrimes unit. Over 70 suspects have been arrests since the raids began, including alleged hackers from the United Kingdom, India, South America, the United States, Eastern Europe, the Former Yugoslavia, Israel, and elsewhere. The homepage of Darkode.com currently shows a message from the FBI saying that the domain has been seized by the law enforcement agency and several others acting through Europol. Around the message are the seals of police departments from more than a dozen countries. The Israeli suspects include an Israeli Arab who is believed to have used his hacking prowess to assist a terror group hostile to Israel, either by passing on money or stolen data; though an official from the Israel Police cybercrimes unit said he could not disclose which group. The other two suspects are brothers from central Israel. The identities of all three suspects are not cleared for publication for the time being. All three were brought for a remand extension at the Tel Aviv Magistrate’s Court on Wednesday and were ordered kept in custody until Sunday. Since the site went online in 2007 its been used as a black market for hundreds of hackers to meet and collaborate, and buy and sell stolen data, including, but not limited to, credit card information, email addresses and passwords, and personal details to aid in identity theft. An officer from the Israel Police cybercrimes unit on Wednesday called the forum “a factory for the production of cyber weapons.” It was also a popular meeting place for hackers looking to contract other cyber criminals to carry out attacks for them. For instance, hackers looking to carry out a distributed denial of service attack (DDoS) could take to the forum and contract such attacks from other attackers, in exchange for payments made in bitcoins, the online currency. Payments were also made by way of money transfer to bank accounts, which Israel Police said indicates the level of freedom the forum members said they had operating on the website. The site was invitation only, and members could only gain access after two separate members recommended them and later showing examples of cyberattacks they had carried out in the past, a sort of “hacking portfolio” as one official from the Israel Police cybercrimes unit said Wednesday. The FBI on Tuesday sent agents from their Israel liaison office to the Lod headquarters of the LAHAV 433 unit, popularly referred to as “the Israeli FBI”, to watch the arrests take place in real time. In a situation room, the FBI agents and officers from the cybercrimes unit watched a screen that showed the countries worldwide where the raids were being carried out, as well as the names of the suspects being arrested and removed from the screen in real time, police said Wednesday. Source: http://www.jpost.com/Business-and-Innovation/Tech/Three-Israelis-among-dozens-arrested-in-global-sting-on-hacking-forum-409092

Continue Reading:
Three Israelis among dozens arrested in global sting on hacking forum

The most damaging ramifications of DDoS attacks

More than half of IT security professionals (52 percent) said loss of customer trust and confidence were the most damaging consequences of DDoS attacks for their businesses, according to a survey cond…

View article:
The most damaging ramifications of DDoS attacks

Bitcoin Exchange OKCoin’s Statement After July DDOS Attacks

Last week, bitcoin exchange OKCoin suffered a DDOS (distributed denial of service) attack, preventing users from accessing the platform for a while. On the afternoon of the attack, the company’s significant resources capable of defending against such attacks were able to limit the impact on the Chinese platform’s K-line. However, another stronger attack was made later on in the same day, leading the tech team to immediately set in motion the emergency response plan of switching to a highly secure server and enacting counter CC attack measures. This took some time to take effect so some users still encountered problems when it comes to accessing the bitcoin exchange. Bitcoin Exchange Compensation In a statement published on its blog, OKCoin shared the details on why some customers still had login problems even if the emergency measures were put in place. The company also addressed questions regarding trades that have gotten executed even during the attack and speculations against price manipulation. In addition, OKCoin shared that they will carry out proportioned compensation according to the user’s realized losses. Starting today, the bitcoin exchange will begin contacting customers who suffered losses as a result of being unable to access OKCoin’s futures platform on July 10th from 17:00 to 17:19. Aside from that, OKCoin will fund the purchase of 1000 bitcoins, while also using 1000 bitcoins from the clawback and vicious attack insurance fund to together create a 2000 bitcoin incident compensation fund. The company has also pledged to hand over the logged actions related to the attacks to the national police for an investigation of the source of these attack. In the meantime, the bitcoin exchange also decided to remind customers of the inherent risks associated with trading cryptocurrencies. The company emphasized that the digital currency industry is still in its early stages and firms are still adjusting to potential criminal attacks as they go along. Source: http://www.newsbtc.com/2015/07/13/bitcoin-exchange-okcoins-statement-after-july-ddos-attacks/

More here:
Bitcoin Exchange OKCoin’s Statement After July DDOS Attacks

Envato Targeted by DDoS Attack, WordPress Theme Authors Report Major Decline in Sales

If you’ve attempted to access Themeforest or any other site on the Envato network lately, you may have encountered some down time. The company updated customers and community members today, attributing the technical difficulties to a DDoS attack: Since July 1, Envato has been the target of a sustained DDoS (distributed denial of service) attack. The attacker, whose motive and identity are unknown, has repeatedly flooded our servers with high levels of traffic, causing our services to be unavailable at various times. The most recent outage happened over the weekend when Envato Market was down for three hours on Friday and one hour on Sunday. This is a significant chunk of time for a market that paid out $224 million dollars to its members in 2014. The downtime has also impacted WordPress theme authors, who continue to dominate the Envato’s marketplace. According to Ben Chan, the company’s director of growth and revenue, 30 of the 31 sellers who make up the Power Elite wall of fame (selling $1 million+ worth of items) are WordPress product authors. The power of the WordPress economy on Envato is undeniable, but sales have taken a sharp decline in the past couple of months, even before the DDoS attack. According to PremiumWP, which cites reports from elite theme author Chris Robinson of Contempo and many others, sales have suddenly declined 50-70%. “Sales have declined over 70% starting from May with each passing day getting worse,” Robinson said in the members’ forum. “I’ve also spoken with other elite authors explaining the same thing. One example going from $1500/day to $700 – sure that’s still a great deal of money BUT what the hell is happening? “This isn’t just one or maybe twenty authors, it is marketplace wide affecting everyone. A marketplace wide decline in sales of this magnitude doesn’t just happen due to vacations, or other buyer factors. Going through the years of sales data (since 2008) this has never happened, I’ve personally gone from $2-3000/week to less than $700/week…that’s insane!” With new authors and products entering the market every day, the market share for established authors is slowly diminishing, but members are not convinced that this is the sole cause of the sharp drop in sales. FinalDestiny of TeoThemes, another author whose sales are declining, blames the one-size-fits-all theme products for gobbling up a greater slice of the market share. “Everybody is tired of these huge, monster multipurpose themes having the same price as normal themes, and that’s pretty much killing the marketplaces. But Envato couldn’t care less, as long as they get their share,” he said. In another thread, which ended up getting locked, there are 27 pages of comments from users speculating about why their sales have been dropping. Members cite seasonal buying fluctuations, piracy, Themeforest’s recent drop in Google search rankings, VAT and hidden price additions on checkout, and unfair pricing advantages for monster themes that claim to do everything, among other possible causes. In one thread, titled “More than 50% sales drop for most of the authors. Does TF care for Authors?“, an Envato community officer offered the following comment: We don’t really give sales updates over the forums other than to say your sales can go up and down for a multitude of reasons. Try not to assume the sky is falling every time the USA has a long weekend We have fast and slow periods throughout the year same as any business, and your portfolio will no doubt have peaks and valleys as well. This kind of generic reply has left theme authors scratching their heads, despite multiple threads in the forums popping up with concerns from those who are alarmed by the sudden drop. Many WordPress theme authors depend on Themeforest as their primary source of income. In one reply, the Aligator Studio seller sums up their concerns and frustration with the inability to convince Envato of the unusual circumstances that are affecting large numbers of sellers: We are not talking about valleys and peaks, we’re talking about a general traffic and sales fall, from New Year until now, especially after April. We’re not talking about regular ups and downs (sometimes steeper, sometimes not), due to longer weekends, summer holidays, and general and the usual stuff happening here in the last couple of years. It’s not a sky falling – it’s inability to pay our bills, we’re not fanatics that foresee the end of the world. Envato has yet to provide an official statement about the marketplace-wide decline in sales, apart from recognizing the network’s unavailability due to the recent DDoS attack. Source: http://wptavern.com/envato-targeted-by-ddos-attack-wordpress-theme-authors-report-major-decline-in-sales

View article:
Envato Targeted by DDoS Attack, WordPress Theme Authors Report Major Decline in Sales

New Reddit rival Voat hit by DDoS attack

A would-be rival to Reddit called Voat is getting media attention. Is that what led someone to launch a DDoS attack on Sunday? A group of disaffected users of the news site Reddit, often called the “front page of the internet,” recently migrated to a new community site called Voat. But in the wake of media attention for Voat, it appears another group decided to launch a Distributed Denial of Service attack in an attempt to take it offline. The attack, which began Sunday night, was confirmed on Twitter by Voat: The maintenance on our servers ended several hours ago, but we are still being hit with a layer 7 DDoS attack as Confirmed by CloudFlare. — Voat (@voatco) July 12, 2015 The tweet cites CloudFlare, a security company that can help sites manage DDoS attacks. Such attacks typically involve antagonists who harness botnets in order to direct massive amounts of traffic at a website’s servers, and knock it offline. The attack does not appear to have taken Voat’s website down for any length of time, though a message on its homepage says the incident has forced it to cut off access to the site from various apps: “In order to keep Voat at least somewhat responsive, we’ve bumped up CloudFlare security settings which essentially breaks most Voat third party apps currently on the market. We are sorry about this and we are working on a solution and taking this time to optimize our source code even further.” It’s unclear who is responsible for the DDoS attack, though some are suggesting (on Reddit and Voat naturally) that Reddit users may be involved. Although Voat is an obscure site (its attraction apparently lies in its reputation as a “troll haven”), its emergence – and the DDoS response to it – underscores once again the volatile, migratory nature of online communities. As my colleague Mathew Ingram explained, such communities can be “like an anthill, but one where there is no queen or recognized authority or even common purpose — one where all the ants wander around doing whatever they want, whether it’s building something beautiful or destroying things just for the sake of destroying them.” Source: http://fortune.com/2015/07/13/new-reddit-rival-voat-hit-by-ddos-attack/

Read the article:
New Reddit rival Voat hit by DDoS attack