Regular web users unwittingly launch DDoS attacks on Ukraine

Date:
Wed, 30 Mar 2022 14:00:12 +0000

Description:
A hundred websites are making visitors send HTTP GET requests to a dozen Ukrainian sites.

FULL STORY ======================================================================

Web users are being unwittingly recruited for distributed denial of service ( DDoS ) attacks against multiple websites belonging to the Ukrainian
government and local non-profits.

As reported by BleepingComputer , an unknown threat actor has managed to compromise a number of WordPress websites, and embed a unique JavaScript
code, which sends an HTTP GET request to a total of ten websites.

When someone visits one of these sites, their browser is forced to execute
the code. The objective of the campaign is to overload the websites with fake traffic and take them offline. TechRadar needs you!

We're looking at how our readers use VPNs with different devices so we can improve our content and offer better advice. This survey shouldn't take more than 60 seconds of your time, and entrants from the UK and US will have the chance to enter a draw for a 100 Amazon gift card (or equivalent in USD). Thank you for taking part.

Click here to start the survey in a new window << Abusing civilians

The people whose endpoints are being used for this attack almost certainly dont know they are part of an attack. Besides slowing down their browsing a little, theres no indication of the browser essentially being hijacked.

Bleeping Computer further explains that every request to the websites utilizes a random query string, so that the request doesnt get served through Cloudflare or a similar CDN . Instead, its directly received by the target server .

Ukrainian websites arent the only victims of the attack, though. BleepingComputer found that the same script is being used to mount attacks against roughly 70 Russian websites too. The difference is that, in this
case, the individuals are aware they are partaking in a DDoS campaign. Read more

Ukrainian ISP suffers 'massive cyberattack'

Russia-Ukraine war pushes OneWeb into the arms of rival SpaceX

Qualcomm stops selling chips to Russian firms

The war between Russia and Ukraine has spilled from the physical realm into cyberspace. Earlier this week, one of Ukraines Internet Service Providers (ISP), Ukrtelecom, reported suffering a major cyberattack, which brought internet connectivity in the country down to almost a tenth of its pre-war levels.

The ISP later announced that the attack had been thwarted, but connectivity for civilians is likely to remain patchy, as the ISP wants to ensure that the government and military have stable access, before restoring it for the rest of the citizens. Protect yourself from one of the most common cyberthreats around with the best ransomware protection services

Via BleepingComputer



======================================================================
Link to news story: https://www.techradar.com/news/regular-web-users-caught-up-in-ddos-attacks-on- ukraine/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)