The case of “Shellshock,” the new serious vulnerability discovered in a part of the Bash software and disclosed to the public last Wednesday, seems to be taking a new turn. According to security researchers, the rate of attacks has increased dramatically, with more than 1,970 incidents being recorded every hour.
Security company Incapsula announced last week that over a 24-hour period (from Thursday to Friday), an average of 725 attacks were recorded per hour, while a total of more than 17,400 attack incidents occurred.
Attacks increased significantly over the weekend
In an updated report published this week, the company notes that incidents involving Shellshock have increased significantly, based on new data from its systems covering a four-day period after the initial vulnerabilities (which carry the identifiers CVE-2014-6271 and CVE-2014-716) were disclosed.
The company says its web application firewall has successfully blocked more than 217,089 attempts to exploit vulnerabilities across more than 4,115 domains. From Sunday to Monday, increased attack rates were observed, with “short bursts of high volume turning into a steady stream of malicious requests.”
