Slashdot Mirror
One Million IP Addresses Used In Brute-Force Attack On A Bank (softpedia.com)
Cisco says in just one week in February they detected 1,127,818 different IP addresses being used to launch 744,361,093 login attempts on 220,758,340 different email addresses -- and that 93% of those attacks were directed at two financial institutions in a massive Account Takeover (ATO) campaign. An anonymous reader writes: Crooks used 993,547 distinct IPs to check login credentials for 427,444,261 accounts. For most of these attacks, the crooks used proxy servers, but also two botnets, one of compromised Arris cable modems, and one of ZyXel routers/modems. Most of these credentials have been acquired from public breaches or underground hacking forums. This happened before the recent huge data breaches such as MySpace, LinkedIn, Tumblr, and VK.com.
It's apparently similar to the stolen-credentials-from-other-sites attack that was launched against GitHub earlier this week.
It's apparently similar to the stolen-credentials-from-other-sites attack that was launched against GitHub earlier this week.
What is the world record for cloud attacks? Cloud City needs some policing.
One million is more than you have and probably more than that orange condom is actually worth.
Nothing to worry about. Money is about as real as bitcoins. We can either print more, or just set the debt column to zero in Microsoft Excel.
Didn't realize what IoT actually stands for.
Sheesh, evil *and* a jerk. -- Jade
we owe 19 TRILLION dollars, thats 19 million million. America has been DESTROYED under obama's rule.
So it's perfectly OK when Bush increased our national debt by 6 trillion, but not OK for Obama to increase it by 6.5 trillion ?
My own personal (as in, at home hosted on a cable modem) web server used to get these same kinds of distributed dictionary attacks, botnet attempts to gain access to whatever they can. There were times when I would see this type of thing almost once a month or so; then it started to taper off and I haven't seen it in some time. I figured the botnets were just doing other things (or had decomposed).
:)
And yes, I acknowledge that there is nothing important about my web server. I figured the botnets just occasionally go through every IP address they can find that accepts ssh connections and my number comes up every so often. I've never seen an IP address come up in both my web and ssh logs.
And yes, I know I can do more to prevent this. People offer up plenty of suggestions. Frankly I don't care, and I actually enjoy seeing tons of blocked ssh traffic in my logs from time to time. As you might expect the vast overwhelming majority of traffic is Chinese script kiddies attempting dictionary attacks as root; I don't care about those as I don't allow remote root. I find the distributed, phone book, and distributed phone book attacks much more interesting. They even give me a chance to tune up my cron jobs that parse my server logs
Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
How incompetent do you have to be as a company to have THREE backdoors in your own router, intentional or accidental....
Star Wars news never had a problem reaching the frontpage.... just saying
Agreed, the editors have really been dropping the ball for years. It takes them days to report on recent events.
Well...them IP addresses, they had to count them all. Now they know how many IPs it takes to fill the Albert Hall.
For long time, I had probably the largest database of active bots and open proxies. I haven't counted for a while, but I don't think I have a million. That's one hell of an attack. Typically we see hundreds to a few thousand used in each attack.
How documented is the link with MySpace, LinkedIn, Tumblr, and VK.com leaks? It is in Slashdot summary but not in referenced articles at Akamai and Softpedia.
First, you should recheck your numbers. Second, Obama called it treasonous when Bush did it.
Money is a measure of effort required to get a unit of it. It is also like a claim on goods and services. It is a logical construct, but it is not meaningless. The construct has persisted for millennia as a result of the benefits it provides to individuals.
To a central bank which can have it printed, it can seem meaningless. And the effort required to obtain a unit of it by an agricultural field hand versus the CEO of a financial services company are obviously very different. Central banks can distribute it to desired companies via bond purchases and other enticements.
I'd love to turn you on
better crack down on spoofing or better yet patent numbers.
ipv6 is worse yet because it's as hard to read the firewall logs as it is systemd's binary shit
You do know Congress sets spending...
Damn, but you really are one special kinda retard.
Conservative bullshit. You really are a special kind of idiot.
I would say it was a moronic act by both. Evnetually it is going to bite the US on the arse in a big way, their is only so far you can keep kicking the debt down the road as the higher it goes the less money the government has (as it has to spend an ever increasing portion on interest repayments) and hence the more debt it needs. eventually just like any household debt it will quickly spiral out of control till something has to give.
what a load of bullshit, you have been reading too much of the crap printed by those that put their faith in bitcoin or those that think it is a Zero sum game. money depending on country is backed by various securities or comodities and is a unit of effort or goods and is simply a substitute for having to directly barter goods or labour, you can think of money as an note or I Owe You, except being tied to an individual it is tied to any unit within a given economy that utilises that note.
a million alone for a brute force. Now think about the dangers of IPv6!!!
https://www.youtube.com/watch?...
Name Calling vs Facts: Facts always win.
Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
Most sites that I use that have risk associated with them will shut down an account if more than three attempts are made with bad logins. It sounds like these banks' systems allowed unlimited login attempts. I have a hard time believing that they would have security that lax.
"For most of these attacks, the crooks used proxy servers, but also two botnets, one of compromised Arris cable modems, and one of ZyXel routers/modems."
Why are banks using bot nets & proxy servers??
Here's a fact: Congress, and only Congress sets the spending of the country. While the Executive suggests a budget, Congress makes whatever changes they like to it, and is who passes it into law.
Here's another: recessions cause Federal deficits to rise as tax revenues decrease while spending must remain relatively constant so as not to cause a much worse recession. If you're the type to look for someone to blame, blame the guy that started the recession through a complete failure to regulate risky bank activity, not the guy who inherited it.
Here's another: starting two wars without the funding to pay for them and adding a huge new Medicare entitlement program without the funding to pay for it is "unpatriotic". Not gutting the Federal budget and sending the economy into a tailspin because you inherited a recession and the attendant deficit that comes with it is "prudent".
This comment is my opinion and does not represent an official position of Donald Trump or others I do not work for
1) Recession started just after Bush got into office (less than one year) can we blame it on Clinton?
2) Recession has continued for nearly 14 years straight, more or less. Can we blame Obama?
3) The deficit was called Unpatriotic when Obama as criticizing GWB, and was half its current size
4) Obama has ended all the wars, cut military spending, and yet the deficit has more than doubled in size under him
5) While you can blame congress, you can blame the (D) and (R) parties both of whom don't give a rat's ass about spending, the (D) more so than the little (d) Republicans.
6) Risky bank activity thanks to the Mandates of Frank(D)-Dodd (D)
BTW, Risky Bank activity has happened under both (D) and (R) Presidents because greedy bastards in the bank have an "out" in FDIC and similar insurance. All the regulations designed to protect banking consumers have ended up only screwing banking consumers via Bank bailouts on Taxpayer dimes.
And yes, I hate the (R) party for saying one thing, and never having the guts to actually do it. And now, with Obama's sequestration, he is blaming the (R) for allowing the budget to be punted every year down the road.
To fix the problem we have to get rid of baseline budgeting and justify EVERY penny spent. There is a whole slew of budget items that while a minor droplet in the firehose of the budget, that should be gone. And you kill enough of those, and eventually you'll affect the firehose stream. And since the Federal Budget, including ALL "Entitlements" is mostly (over 1/2) off the table for cuts (as in cut in growth, not actual cuts), we're doomed to never reigning in the problem. Let it go long enough, and we'll end up like Greece, Venezuela or North Korea.
There are sensible alternatives to "gutting" (or minor cuts in increases as I call them) spending. But as long as claim others want dead grannies and starvign children, we'll never actually address the problem.
As for the recession, I have a fix. Lets have ONE year where congress reviews each and every regulation to see if it has had the desired effect and justify whatever is renewed.
Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.