Last week, many Internet Service Providers (ISPs) in Belgium, France and the Netherlands reported DDoS attacks that targeted their DNS infrastructure.
More than a dozen Internet service providers (ISPs) across Europe have reported DDoS attacks targeting DNS infrastructure.
The list of ISPs that suffered attacks during the last week includes the Belgian EDP, the French Bouygues Télécom, the FDN, the K-net, the SFR, the Dutch Caiway, the Delta, the FreedomNet, the Online.nl, the Signet and the Tweak.nl.
The attacks lasted no more than a day and were eventually mitigated, but the ISP services «fell» while the DDoS was active.
NBIP, a non-profit foundation founded by Dutch ISPs to collectively combat DDoS attacks and government wiretapping efforts, provided ZDNet with additional information about last week's incidents.
“The majority of the [attacks] were DNS amplification and LDAP-type attacks. Some of the attacks lasted more than 4 hours and reached 300 Gbit/s in volume”, said NBIB.
The DDoS attacks against European ISPs began on August 28, a day after a criminal gang to be involved in DDoS extortion attacks against financial institutions around the world, with victims including MoneyGram, YesBank India, Worldpay, PayPal, Braintree, and Venmo.
While there is still no evidence that the two series of events are connected, DDoS attacks against financial services subsided once the attacks against European ISPs began.
Additionally, sources monitoring the gang reported to ZDNet that shortly before attacking financial services, the same group had targeted several ISPs in Southeast Asia a few weeks earlier.
Additionally, several security experts have said that CenturyLink's massive outage that occurred over the weekend is believed to have been the result of a DDoS attack. In separate reports, both Cisco and CloudFlare said the outage was due to a DDoS attack.
