Slashdot Mirror

This seems needlessly complicated. Why wouldn't they just mount a DoS attack directly using the firewall's networking capacity?

This is not hypothetical. This happened.

We'll never know for sure why they did it this way. Maybe they're worried that DDoS software might leave fingerprints that the recipient could detect and distinguish from real browsers. Maybe attacking from your own IPs and your own AS# makes attribution easier and reveals (burns) the attacker's infrastructure. Maybe they couldn't afford the extra bandwidth or CPU to mount an attack on top of the bandwidth necessary to proxy all internet for a large country.

Add these to your custom hosts file as shown for blocking their communications, crippling them:

0.0.0.0 www.eastafro.net
0.0.0.0 eastafro.net
0.0.0.0 getadobeplayer.com
0.0.0.0 diretube.co.uk
0.0.0.0 meskereme.net
0.0.0.0 time-local.com
0.0.0.0 time-local.net
0.0.0.0 pssts1.nozonenet.com
0.0.0.0 nozonenet.com
0.0.0.0 cyberbit.com
0.0.0.0 cyberbit.net
0.0.0.0 pupki.co
0.0.0.0 signalschool.net
0.0.0.0 rdhotel.uz
0.0.0.0 fic.gov.zm
0.0.0.0 gov.zm
0.0.0.0 malacanang.gov.ph
0.0.0.0 gov.ph
0.0.0.0 kazimpex.kz
0.0.0.0 mcmr.kz
0.0.0.0 villepinte2017.dynu.net
0.0.0.0 dynu.net
0.0.0.0 pnv.vipnetwork.fr
0.0.0.0 ipnetwork.fr
0.0.0.0 flashpoint-ip.com
0.0.0.0 cd-media4u.com
0.0.0.0 thewhistleblowers.org

* Even IF You had them infecting you? They'd now be CRIPPLED unable to "talk back to mama"...

(... & that's the BEAUTY of hostsfiles, a NATIVE SOLUTION operating in kernelmode speed & efficiency using what you already have to do the job!)

APK

P.S.=> SOURCE -> https://citizenlab.ca/2017/12/champing-cyberbit-ethiopian-dissidents-targeted-commercial-spyware/ ... apk