
A massive DDoS attack on the infrastructure of a major network service provider
Dyn , which is currently taking place, has led to the inaccessibility of many popular resources that use the company's DNS services. The victims include such famous organizations as Github, Twitter, eBay, the New York Times, Etsy, SoundCloud, Spotify, Heroku, Shopify, PayPal and many others.
According
to Dyn, the attack on the DNS infrastructure began on October 21, 2016 at 11:10 UTC (14:10 Moscow time). At 13:20 UTC, performance has been restored. However, as early as 15:52 UTC, the second wave began, which until now cannot be reflected by their engineers.
Latest information from 21:43 UTCJust a few minutes ago, Google’s public DNS had no information about the github.com IP addresses, but it appeared in the process of writing this article. The IP addresses of twitter.com, soundcloud.com, heroku.com, quora.com, box.com are still unavailable.
')
The source of the attack is currently unknown, however, given the period during which one of the largest service providers cannot cope with it, one can only be amazed at the amount of resources available to the attacker.
UPD1 : Meanwhile, events are evolving. The company told CNBC that the third wave of the attack had reached her. A curious detail: according to company representatives, one of the sources of the attack is the “Internet of Things” (Internet of Things). They also report that the attack is made using devices infected with malicious code that appeared in recent weeks. It is still unknown who is behind this attack. The attackers are silent. “All they do is move with each attack around the world,” said Kyle York, director of strategic affairs at Dyn.
The US Department of Homeland Security stated that it was “investigating all possible causes” of the attack. US intelligence officials said they excluded North Korea from the suspect list.
The attack "is well planned and implemented, and occurs simultaneously with tens of millions of addresses," the company told CNBC.