Tag Archive for: relevant

Are Decade-Old DoS Tools Still Relevant in 2021?


Surprisingly, the answer is yes.

After Anonymous fell apart in 2016, the threat landscape shifted rapidly. The once mainstream group of organized Denial of Service (DoS) attacks with simple GUI-based tools were no more; as the era of Distributed Denial of Service (DDoS) attacks and DDoS-as-a-Service began to take shape under the power of new IoT botnets such as Bashlite and Mirai.

While Anonymous has not entirely disappeared, its digital footprint has significantly reduced over the last five years. Today, you can still find Anonymous accounts on the usual social media outlets and video platforms spreading operational propaganda, but with limited impact compared to the past.  However, during a recent Anonymous operation, I was surprised to find that the group, which still uses PasteBin and GhostBin (to centralize operational details), had updated their target list from years prior and suggested the use of Memcached and other reflective attack vectors. They recommended using antiquated DoS tools, such as LOIC, HOIC, ByteDoS, and Pyloris, all nearly 10-years-old.

Tools of The Past

HOIC

High Orbit Ion Cannon, or HOIC for short, is a network stress testing tool related to LOIC; both are used to launch Denial of Service attacks popularized by Anonymous. This tool can cause a Denial of Service through the use of HTTP floods. Additionally, HOIC has a built-in scripting system that accepts .hoic files called boosters. These files allow a user to deploy anti-DDoS randomization countermeasures and increase the magnitude of the attack.

While it has no significant obfuscation or anonymization techniques to protect the user’s origin, the use of .hoic “booster” scripts allows the user to specify a list of rotating target URLs, referrers, user agents, and headers. This effectively causes a Denial of Service condition by attacking multiple pages on the same site while making it seem like attacks are coming from several different users.

Figure 1: HOIC

[Click for Full Report: Quarterly Threat Intelligence Report]

ByteDOS

Once considered a destructive tool, ByteDoS has become a novelty in 2021. ByteDos is a Windows desktop DoS application. It is a simple, standalone executable file that does…

Source…

Join me for a webinar about making cybersecurity relevant in modern day culture

Next week, on Thursday 12th September 2019 at 3pm UK (that’s 10am EST), I’ll be participating in a webinar hosted by The Register alongside MetaCompliance’s Robert O’Brien – and I’d love it if you joined in!

Graham Cluley

Comcast’s New Rented Streaming Box Is A Flimsy Attempt To Remain Relevant

Like countless other cable giants, Comcast continues to bleed cable TV subscribers at an alarming rate. These users, tired of sky-high prices, continue to flee to more competitive streaming alternatives and better customer service. That’s not great news for Comcast, which has spent decades enjoying a stranglehold over traditional TV, thanks in part to the industry’s walled gardens and monopoly over the cable box. And while cable giants could counter the streaming threat by competing on price, they instead continue to double down on ideas that don’t make a whole lot of sense.

Case in point: in a bid to try and keep users from “cutting the cord,” Comcast last week introduced Xfinity Flex. According to the Comcast press release, this new Flex streaming box will be made available to existing Comcast broadband customers for a $ 5 monthly rental fee, providing access to a limited number of streaming services (sans live streaming services like Playstation Vue, SlingTV, or DirecTV Now that directly compete with Comcast’s own offerings):

“Xfinity Flex will deepen our relationship with a certain segment of our Internet customers and provide them with real value,” said Matt Strauss, Executive Vice President, Xfinity Services for Comcast Cable. “For just five dollars a month, we can offer these customers an affordable, flexible, and differentiated platform that includes thousands of free movies and shows for online streaming, an integrated guide for accessing their favorite apps and connected home devices, and the ease of navigating and managing all of it with our voice remote.”

Except the “value” provided by Comcast’s latest effort is dubious at best. For one, Comcast’s new hardware will only allow users to view a handful of curated streaming services and apps chosen and approved by Comcast. Why, exactly, would users, who could pay a one-time flat fee for Roku or build a media center PC (with an endless roster of apps and services), want to instead pay the least liked company in America an additional $ 5 per month for a box that’s highly restricted?

Another caveat: this being the cable company, that $ 5 isn’t actually $ 5. While Comcast rather buries this fact, the company’s ads make it clear that to order get Flex, you can’t have your own router, but have to also rent Comcast’s XFi Gateway for an additional $ 10-13 per month:

In short, Comcast’s $ 5 rental box is actually closer to a $ 15 rented box that doesn’t provide access to the full litany of streaming services. But as is usually the case, the mainstream tech press kind of missed all of that. Comcast-owned CNBC, for example, was quick to claim in a write up of the device that Comcast was somehow “making it easier” for the company’s subscribers:

“Comcast is making it easier for its broadband-only customers to access streaming video without an outside set-top box…”

Except that’s not at all what Comcast is doing here. The entire affair is Comcast desperately trying to seem innovative, when in reality it’s just attempting to erect barriers and keep customers inside its increasingly-irrelevant walled gardens. Customers don’t want to rent another Comcast-requested cable box, and given the wide variety of streaming hardware for sale, they shouldn’t.

Trying to keep customers on Comcast-approved hardware is going to prove to be a fool’s errand. Comcast’s real ace in the hole in terms of battling cord cutting won’t be hardware, but the company’s growing monopoly over broadband in many markets. This dwindling competition is letting Comcast erect arbitrary and unnecessary usage caps and overage fees. Fees that will apply to competing services but not to Comcast’s own TV content, giving it a wonderful way to not just raise rates, but to use its power as network operator to disadvantage streaming providers in the absence of net neutrality rules.

Permalink | Comments | Email This Story

Techdirt.

Check Point boosts cloud-security education to help IT security pros stay relevant

Check Point is investing heavily in educating IT pros about the cloud, not only to promote their own cloud security products but to give potential customers the skills they’ll need to keep their jobs as their employers move more and more resources to public cloud providers.

itai greenberg Check Point

“We try to explain how to be relevant in the cloud,” says Itai Greenberg, head of cloud security for Check Point.

A lot of old-school IT security workers need to learn about how cloud infrastructure works, the terminology used, the interconnections between cloud and corporate owned networks and the ins and outs of APIs, among other skills.

To read this article in full or to leave a comment, please click here

Network World Tim Greene