Code for massive ‘Memcrashed’ DDoS attack made public

You, too, can now attempt a record-setting denial-of-service attack, as the tools used to launch the attacks were publicly  posted to GitHub this week. Proof-of-concept code by Twitter user @037 combined with a list of 17,000 IP addresses of vulnerable Memcached servers allows anyone to send forged UDP packets to Memcached servers obtained from the Shodan.io computer search engine. It’s been just over a week since the first massive Memcached-fueled denial of service attack. The authors of the new tool is being released “to bring more attention to the flaw and force others into updating their devices.” The era of terabit DDoS attacks was ushered in this month with giant denial of service attacks last week set records with 1.35-terabit-per-second and 1.7 -terabit-per-second attacks. They used unsecured Memcached servers to launch the attacks, one of which targeted GitHub itself. The latter attack targeted an unnamed U.S. service provider, according to Arbor Networks. A second tool was released on […]

The post Code for massive ‘Memcrashed’ DDoS attack made public appeared first on Cyberscoop.

Continue reading Code for massive ‘Memcrashed’ DDoS attack made public