Slashdot Mirror


Another 100 Gigabit DDoS Attack Strikes — This Time Unreflected

darthcamaro writes "In March of this year, we saw the first ever 100 Gigabit DDoS attack, which was possible due to a DNS Reflection Amplification attack. Now word is out that a new 100 Gigabit attack has struck using raw bandwidth, without any DNS Reflection. 'The most outstanding thing about this attack is that it did not use any amplification, which means that they had 100 Gigabits of available bandwidth on their own,' Incapsula co-founder Marc Gaffan said. 'The attack lasted nine hours, and that type of bandwidth is not cheap or readily available.'"

5 of 93 comments (clear)

  1. Is this an ad? by Anonymous Coward · · Score: 5, Insightful

    TFA sure reads like one...

  2. I can't get one thing by ruir · · Score: 4, Insightful

    If they haven't identified the attacker how can they say with 100% certainty it only came from one source, and was un-reflected? For I all I know, you could have a botnet fabricating packets with the same characteristics simultaneously.

    1. Re:I can't get one thing by malacandrian · · Score: 5, Insightful

      That is the point of using a botnet to run a DDoS, yes. A single control signal issues a huge surge in traffic. That doesn't make it an amplified attack though. An amplified attack is when the zombies trick a third party (such as a DNS server) to reply to the victim with more information than you sent them. This can up the size of the attack 100-fold.

  3. 100 GBit isn't large by Anonymous Coward · · Score: 3, Insightful

    A botnet with 10000 bots, each on a 10 MBit connection, will suffice.

  4. Re:worst use of a DDoS by Anonymous Coward · · Score: 3, Insightful

    You missed a possibility:

    D) None of the above, it's just Incapsula's anti-DDoS services ad.

    The article goes all how attack was "unknown to many" and "victim remains in shadows" (read: we can't even know whether it all took place), and then goes into something that reads like sales brochure.