Hackers are using DDoS attacks to squeeze victims for ransom DDoS Attack
Now may be a good time for businesses to invest in DDoS protection as cybercriminals have begun using the threat of large-scale DDoS attacks to extort ransoms from organizations.
According to a new blog post from Cloudflare, a major Fortune Global 500 company was targeted by a Ransom DDoS (RDDoS) attack by a group claiming to be the Lazarus Group in late 2020. This extortion attempt was part of a wider trend of ransom campaigns that unfolded throughout last year and cybercriminals will likely continue to use similar methods as they have been quite successful.
Unlike a ransomware attack where cybercriminals break in to a company’s network in order to lock their files, RDDoS attacks use the threat of taking down a company’s website with an overload of traffic and this can be crippling to their business.
Just as an organization can use cloud backup and other similar services to protect their data from being locked following a ransomware attack, DDoS protection ensures that a company’s site will remain protected if it’s suddenly flooded with an overload of traffic.
Ransom DDoS attacks
The attack covered in Cloudflare’s latest blog post began as many attacks do, with ransom emails sent out to the organization’s employees. These emails contained a ransom note which reads:
“Please perform a google search of “Lazarus Group” to have a look at some of our previous work. Also, perform a search for “NZX” or “New Zealand Stock Exchange” in the news. You don’t want to be like them, do you?… The current fee is 20 Bitcoin (BTC). It’s a small price to pay for what will happen if your whole network goes down. Is it worth it? You decide!… If you decide not to pay, we will start the attack on the indicated date and uphold it until you do. We will completely destroy your reputation and make sure your services will remain offline until you pay…”
The attackers then began sending a large amount of traffic to one of the company’s global data centers by firing gigabits of data per second towards a single server. This led to a denial of service event and generated a series of failure events.
Next the cybercriminals launched a “teaser” attack at the end of a work day that was quite difficult to mitigate due to the fact that the organization was still using an on-demand scrubbing center service. An employee at the company who spoke with Cloudflare then “realized that an always-on service would have been much more effecting than on-demand, reactionary control that takes time to implement”.
Mitigating against DDoS attacks can be quite difficult when an attack is already in progress which is why businesses should consider using real-time DDoS protection instead. We’ll likely see an increase in similar attacks this year, so now is the time to take the necessary precautions or risk having your website taken down or even worse, having to pay an exorbitant ransom not to be targeted by such an attack.
Now may be a good time for businesses to invest in DDoS protection as cybercriminals have begun using the threat of large-scale DDoS attacks to extort ransoms from organizations. According to a new blog post from Cloudflare, a major Fortune Global 500 company was targeted by a Ransom DDoS (RDDoS)…
Recent Posts
- 18 Best Mechanical Keyboards for PC (2024): Gaming and Work
- Taylor Swift gets custom collab with TikTok as UMG battle continues
- LastPass users tricked by hackers posing as staff to steal passwords
- The 8 best games in the Meta Quest April Mega Sale that you should buy right now
- How planning and infrastructure failed during Maui wildfires
Archives
- April 2024
- March 2024
- February 2024
- January 2024
- December 2023
- November 2023
- October 2023
- September 2023
- August 2023
- July 2023
- June 2023
- May 2023
- April 2023
- March 2023
- February 2023
- January 2023
- December 2022
- November 2022
- October 2022
- September 2022
- August 2022
- July 2022
- June 2022
- May 2022
- April 2022
- March 2022
- February 2022
- January 2022
- December 2021
- November 2021
- October 2021
- September 2021
- August 2021
- July 2021
- June 2021
- May 2021
- April 2021
- March 2021
- February 2021
- January 2021
- December 2020
- November 2020
- October 2020
- September 2020
- August 2020
- July 2020
- June 2020
- May 2020
- April 2020
- March 2020
- February 2020
- January 2020
- December 2019
- November 2019
- December 2011