Hackers use web servers to deliver more powerful DDoS attacks


Hackers use web servers to deliver more powerful DDoS attacks

Warwick Ashford

Cyber criminals are using a new type of distributed denial of service (DDoS) attack that is more powerful and elusive than any predecessors, says security firm Imperva.

A new generation of DDoS attacks does not use bot-infected PCs, but instead capitalises on the greater power of web servers, said researchers.

They estimate that hundreds of web servers have been infected and are being used to carry out DDoS attacks.

The source of the attacks is also more difficult to detect, with trace-backs typically leading to a lone server at a random hosting company, the researchers said.

These web server-based DDoS attacks are likely to be ongoing, said Amichai Shulman, chief technology officer at Imperva.

"Now that a network of server bots has been created, it will be quite easy for them to 'rent' them out or increase their activity," he said.

Companies should regularly monitor their Google presence to look for evidence of being compromised, Shulman said.

Email Alerts

Register now to receive ComputerWeekly.com IT-related news, guides and more, delivered to your inbox.
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

COMMENTS powered by Disqus  //  Commenting policy