Tag: dns

  • Google blocked the largest DDoS attack ever, peaking at 46 million requests per second

    Google blocked the largest DDoS attack ever, peaking at 46 million requests per second

    While it’s just now being reported on, the DDoS attack on Google Cloud occurred on June 1st and lasted for 69 minutes – reaching a peak of 46 million requests per second.

    Source: Google Cloud

    We’ve covered Distributed Denial of Service (DDoS) attacks before in this blog, but the scale of this one is mind boggling. It’s nearly twice the size of Cloudflare DDoS attack from last year around this same time, which peaked at 26 million requests per second (sent from just over 5000 devices).

    If you’re wondering where the devices used in these attacks originate from, the answer in this case is unsecured devices. Specifically compromised Mikrotik routers.

    There’s been a number of articles regarding possible compromises to the Mikrotik brand of router including one instance that involved over 200,000 devices. Many in the security space wondered if there would be a fallout from that and now, we have our answer.

    However, what’s more impressive is not the scale of this attack, but the fact that it was successfully blocked by Google.

    Botnet attacks of this nature are not rare, it’s difficult to say exactly how many attacks occur per day but it has been noted they’re on the rise since the Russian invasion of Ukraine. A botnet is essentially an assembly of compromised devices that are used to attack a target. DDoS attacks are one of the most common uses, but they’re also used for phishing, cryptomining, or to bruteforce passwords just to name a few. The largest botnet ever recorded belonged to Russian BredoLab and consisted of 30,000,000 devices.

    Would be bad actors can even purchase DDoS as a service for as little as $5 per hour which should give you an indication how prevalent and common they are as an attack vector.

    Google blocked this attack by leveraging their Cloud Armor product, a network security service directly aimed at preventing DDoS attacks. If they were looking for a powerful case study for the effectiveness of this product, we can think of no better example then effectively blocking the largest DDoS attack in history (so far).

    Part of blocking a DDoS attack is early detection. DDoS attacks ramp up, if you can detect an incoming flux of peculiar traffic to your network you can block the attack before it’s able to scale up and cripple your network.

    Besides blocking potential attacks, the other side of the coin is not becoming an unwilling participant in a botnet through a compromised device in your home or business.

    The sinister part of it is you may not even be aware your device is compromised and it’s not just mobile devices and personal computers that can be affected, even IoT (Internet of Things) devices can be hacked. There are a few things you can do to prevent your devices from being taken over by hackers as we outline in the chart below:

    If your business needs assistance with protecting from any potential attacks or making sure your devices stay uncompromised, Valley Techlogic can help. All of our plans include robust cybersecurity protections at no additional charge, including assisting in your cyber security training goals (after all, human error is the #1 cause of data breaches). Schedule a consultation today to learn more.

    Looking for more to read? We suggest these other articles from our site.

    This article was powered by Valley Techlogic, an IT service provider in Atwater, CA. You can find more information at https://www.valleytechlogic.com/ or on Facebook at https://www.facebook.com/valleytechlogic/ . Follow us on Twitter at https://x.com/valleytechlogic.

  • Yesterday, Facebook experienced their worst outage since 2008

    Yesterday, Facebook experienced their worst outage since 2008

    Yesterday if you were trying to login to Facebook, Instagram, WhatsApp or even Oculus VR you wouldn’t have had much luck. Facebook experienced their worst outage since 2008 (when a bug caused the site to be down for an entire day). They were down for just over 6 hours as a world that suddenly found themselves with more time on their hands speculated why.

    For a brief period, the domain Facebook.com was even for sale if you performed a search for the domain on a domain name search website.

    While many thought it could be an attack on their networks, such as what’s been happening in the VoIP sector lately, others speculated the outage was related to the fire Facebook has been under lately for their business practices.

    On Sunday, Facebook whistleblower Frances Haugen – a former Facebook project manager – went public on how Facebooks policies prioritize profits over their user’s wellbeing. She was the person responsible for the massive data dump that showed Facebook’s algorithms even optimize for hate speech. She noted these problems also exist at Google and Pinterest, other companies she’s performed similar duties for, but that the problem is much worst at Facebook.

    Mark Zuckerberg Meme
    There have been no shortage of memes taking shots at Facebook founder Mark Zuckerberg following the outage.

    Hearings begin this week analyzing the whistleblower findings, particularly as they relate to children on these sites. Amid the controversy Facebook has shelved plans for an Instagram Kids app, though Facebook claims the delay is so they can better analyze the needs of children and parents before moving forward with the app.

    The main crux of the case has to do with both the deluge of data and how major players such as Facebook (and likely beyond) serve that data to their users. It’s a tricky situation because you don’t want to stifle free speech but promoting hate speech and negative imagery, especially to vulnerable audiences such as children, is also wrong.

    There is so much more to the case then we can get to here but suffice to say hearings such as these play an important role in how we as a society consume and regulate data.

    Back to the topic at hand though, after being down for 6 hours Facebook finally emerged although they did so with little in the way of answers as to why their domains were down to the first place. They’ve issued an apology for the outage but beyond that silence.

    Experts who have weighed in speculate the issue had to do with Facebooks DNS (Domain Name System), and anonymous comments that have surfaced from employees said they don’t think the downtime was caused by an attack.

    Some reports have even said during the outage functions inside Facebook offices ground to a halt, with some employees being unable to even use their keycards which could have also contributed to the lengthy delay in fixing the problem.

    Outages such as these should cause even smaller businesses to take a hard look at their technology practices. If Facebook, with the resources they have available, can be brought to a standstill for hours over potentially a small issue such as DNS how would your business fare when faced with a similar issue?

    Downtime adds up, but it doesn’t have to. Having a partner in technology like Valley Techlogic is the number one way your business can avoid the hassle, expense, and embarrassment of lengthy downtime. Find out more today.

    Looking for more to read? We suggest these other articles from our site.

    This article was powered by Valley TechLogic, adns, n IT service provider in Atwater, CA. You can find more information at https://www.valleytechlogic.com/ or on Facebook at https://www.facebook.com/valleytechlogic/ . Follow us on Twitter at https://x.com/valleytechlogic.