Memcached DDoS War

After initial experiments the previous week, February 28th marked the opening shot of a new war — The Memcached DDoS war.

Attackers first exploited a vulnerability in Memcached, a distributed memory caching system, that amplified their attacks to achieve the most powerful attack recorded to that date: 1.35 Terabytes per second. This initial attack was a proof of concept that generated media coverage to ensure widespread knowledge of their capabilities. Since then they have refined the technique, reaching a maximum bandwidth of 1.7 Tbps and hitting thousands of websites and asking for ransom.

The severity of any DDoS attack depends on the importance of the target web application. The following types of assets are extremely important to their owners and as a result are highly appealing targets for ransomware attackers:

Since the beginning of March, we have seen thousands of attacks per day with no signs of slowing down. At this rate an attack is only a matter of time.

DDoS attacks are not new and the end result for this type of attack is no different than other threats that lead to a denial of service and extortion.

These types of attacks are likely to lead to the following types of insurable damages:

Dealing with the magnitude of these attacks requires a dedicated DDoS protection solution and infrastructure. DDoS protection vendors like Imperva, Cloudflare, and Akamai are already protecting their customers from these threats.

If you are a developer, IT manager, security analyst, or a CFO and you believe your organization’s web applications are important make sure it is protected.

Etai Hochman

At-Bay, CTO

Related posts:

Digitization and technological advancements have made automotive industry in a state of disruptive transition. Automotive manufacturers are literally being challenged by fast-changing customer needs…

Many people think that this isn’t impossible. In fact, when I hit the 20K a month mark in December of 2018 neither did I. I hardly believed what it was that I had created and how I got there. But the…

This tutorial will use React hooks to manipulate the spinning React logo and other aspects of the boilerplate App.js. Let’s use the most simple hook useState to toggle the direction of the React logo…