A new twist on distributed denial of service (DDoS) attacks has been published by Prolexic. The DNS Flooder is being sold on the market and allows malicious users to use the Toolkit's DNS servers to launch attacks without any hesitation, and without the need to find open and vulnerable DNS servers on the internet. This DDoS method allows malicious users to launch powerful cyber attacks without having to spend time and money on creating an army of bots with malware infections.
Prolexic's infographic explains how the DNS Flooder toolkit works:
- The toolkit spoofs the intended target's IP address and creates a DNS request, which is sent to the attacker's DNS botnets.
- The attacker's DNS botnets return an extended DNS (EDNS) response. This EDNS response contains much more data than the original DNS request. In some cases, an extended response had amplification factors of up to 50 times the bandwidth of the first request. Because the IP address used in the request was spoofed, the response was reflected back to the attacker's target.
- The toolbox continues to do this many times, which reflects and reinforces the response to the target each time it is repeated.
For more information on how to stop DDoS attacks from DNS Flooder, visit Prolexic
Source: secnews.gr
📧
Subscribe to the SecNews Newsletter
