Connect with us

E-Business

DDoS Perpetrators Change Tactics, Launch High-Bandwidth Attacks

Published

on

Stuart Scholly, president at Prolexic
Kindly share this post

Prolexic Technologies, the global leader in Distributed Denial of Service (DDoS) protection services, has reported that DDoS perpetrators changed tactics in Q3 2013 to boost attack sizes and hide their identities.

 This observation is one of many key findings found in the company’s Q3 2013 Global DDoS Attack Report, which was published today, and can be downloaded from www.prolexic.com/attackreports.

“This quarter, the major concern is that reflection attacks are accelerating dramatically, increasing 265 percent over Q3 2012 and up 70 percent over Q2,” said Stuart Scholly, president of Prolexic.

“The bottom line is that DDoS attackers have found an easier, more efficient way to launch high bandwidth attacks with smaller botnets and that’s concerning.”

Attackers are flocking to so-called distributed reflection denial of service (DrDoS) attacks as they provide the benefit of obscuring the source of the attack (anonymity), while enabling the bandwidth of intermediary victims to be used, often unknowingly, to multiply the size of the attack (amplification). In DrDos attacks, there are always two victims, the intended target and the intermediary. 

Prolexic’s latest report reveals that the total number of attacks against its clients in Q3 2013 remained high and represented the highest total for one quarter.

This occurrence illustrates a consistently heightened level of DDoS activity around the world over the last six months. Of note, more than 62 percent of Q3 DDoS attacks originated from China, far surpassing all other countries.

Findings are based on data gathered from attacks launched during the quarter against Prolexic’s global client base.

For the quarter, peak bandwidth averaged 3.06 Gbps and peak packets-per-second (pps) averaged 4.22 Mpps. The largest attack Prolexic mitigated during Q3 was directed at a European media company, peaking at 120 Gbps.

Summary highlights from Prolexic’s Q3 2013 Global DDoS Attack Report said that compared to Q2 2013, there was 1.58 percent increase in total DDOS attacks

There are also 6 percent decrease in application layer (Layer 7) attacks; 4 percent increase in infrastructure (Layer 3 & 4) attacks; and   44 percent decrease in the average attack duration:  21.33 hours vs. 38 hours during the period.

Compared to Q3 2012 there was 58 percent increase in total DDOS attacks; and 101 percent increase in application layer (Layer 7) attacks

Also there are 48 percent increase in infrastructure (Layer 3 & 4) attacks; and 12.3 percent increase in the average attack duration: 21.33 hours vs. 19 hours during the period.

Prolexic data for Q3 2013 shows a 70 percent increase in reflection attacks (DNS and CHARGEN) over the previous quarter and a 265 percent increase over the same quarter last year.

This rise in DrDoS attacks should come as no surprise, as attack methods that inflict high damage with low effort will always be popular.

“DrDoS attacks don’t require as many bots because the amplification factor is so large,” explained Scholly.

“Because less outbound bot traffic is needed, the botnet can be much smaller. This makes it easier for these botnets to fly under the radar unless you know what to look for.”

Prolexic has closely monitored DrDoS attacks for the last 12 months and has correctly forecasted their increasing popularity, as discussed in a series of four white papers on this resurfacing attack methodology.

“Q3 data also shows that infrastructure attacks maintained their share of total attacks, but within this group there was a big jump in UDP attacks and a corresponding drop in SYN attacks,” said Scholly.

“Combined with the rise in reflection attacks, this quarter showed a significant shift in attack methodologies that all businesses should be aware of.”

Prolexic’s latest attack report includes a detailed analysis of the trend toward reflection attacks, DrDoS reflection services within the underground marketplace.

The analysis examines DrDoS attack methods, tools and services – specifically CHARGEN attacks being integrated into the DDoS threatscape – and provides steps for remediating CHARGEN attacks.

A complimentary copy of Prolexic’s Q3 2013 Global DDoS Attack Report is available as a free PDF download from www.prolexic.com/attackreports. Prolexic’s Q4 2013 report will be released early in the first quarter of 2014.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Why JustMarkets Is a Strong Choice for Gold Trading

Published

on

Kindly share this post

Over the past four years, gold has risen by more than 400%. The precious metal has long been one of the most traded assets in global financial markets. From its role as a traditional store of value to its sensitivity to inflation, interest rates, and geopolitical uncertainty, gold continues to attract traders seeking efficient and predictable trading opportunities during a period of global uncertainty and high volatility.

Why JustMarkets Is a Strong Choice for Gold Trading

JustMarkets

For traders looking to effectively access gold markets, choosing the right trading environment is as important as timing their entry. One of the most popular and effective gold trading platforms is JustMarkets, offering the tools, conditions, and infrastructure to enable traders to achieve their most ambitious gold trading goals.

Tight Spreads on XAU/USD

Cost efficiency is a critical factor in gold trading, especially for active day traders. JustMarkets offers extremely competitive XAU/USD spreads, allowing traders to open and close positions with reduced transaction costs. Lower spreads can significantly impact short-term strategies, where precision and timing are key to effectively entering a trade. By minimizing trading costs, JustMarkets helps traders focus more on market analysis and finding the ideal entry point, and less on overhead.

Fast and Reliable Execution

Gold is recognized for its volatility, especially during the day, especially with economic announcements or geopolitical events. Speed is of the essence in volatile markets. JustMarkets provides high-speed execution of orders, which helps minimize the risks of delays, especially during periods of high volatility. This ensures that traders are able to respond better to market conditions, thereby having better control over trade management.

Flexible Trading Conditions

Each trader has their own approach to gold, ranging from intraday trading to position trading. JustMarkets offers flexible leverage and account types, enabling traders to adjust their exposure based on their risk tolerance and trading style. This flexibility is suitable for both conservative and aggressive traders while still allowing them to access the same global gold market.

Advanced Platforms and Tools

Successful gold trading is based on thorough technical and fundamental analysis. JustMarkets provides access to industry-standard trading platforms equipped with advanced charting tools, multiple timeframes, and a wide range of indicators for recognizing divergences and clear entry points. These features help traders analyze price trends, identify key levels, and plan their trades with greater confidence.

Accessibility via mobile devices and computers via the JustMarkets Mobile Trading app also ensures traders can monitor positions and market movements from anywhere and at any time.

Education and Market Support

Gold is also affected by factors such as inflation rates, central bank policies, and currency fluctuations. Understanding these factors is important for developing a structured trading strategy.

JustMarkets offers resources for traders, which provide information on how global events can impact the price of gold like case studies, daily, bank and weekly analysis. This is a knowledge-based system, which enables the trader to make more informed decisions rather than relying on the price movements of gold.

Trading Activities That Keep Gold Traders Engaged

In addition to the competitive trading environment, JustMarkets also runs various special activities and campaigns that aim to make the trading experience more interesting. At certain intervals, the special activities may include trading contests on specific trading instruments, such as gold, which are highly sought after by traders. This will give the traders an added impetus to keep trading.

The special activities are designed to encourage trading, consistency, and skill-building among the traders, along with the additional motivation for the trading strategies. This is also in line with the overall philosophy of JustMarkets to create a dynamic trading environment where trading, learning, and motivation are linked together.

A Trading Environment Built for Gold Traders

Gold is still one of the most dynamic markets with the greatest number of opportunities in the world. With tight spreads on XAU/USD, fast execution, flexible trading terms, and access to advanced analytical tools, JustMarkets creates an optimal trading environment for those who want to trade gold efficiently.

In addition to the comprehensive educational assistance, JustMarkets continues to position itself as a strong competitor for traders who are looking for professional trading conditions combined with growth opportunities.


Kindly share this post
Continue Reading

E-Business

Microsoft Expands Africa AI Push while DeepSeek Gains Users

Published

on

Kindly share this post

Microsoft is stepping up its push to expand artificial-intelligence adoption across Africa as competition intensifies with Chinas DeepSeek for influence in one of the worlds youngest and fastest-growing digital markets.

Microsoft Expands Africa AI Push while DeepSeek Gains Users

The company plans to train 3 million Africans on its AI technologies this year through partnerships with schools, universities and other institutions, with a focus on South Africa, Kenya, Nigeria and Morocco.

The effort reflects Microsofts broader attempt to accelerate adoption of its AI ecosystem across emerging markets where developers and enterprises are increasingly experimenting with generative AI tools.

Alongside the training initiative, Microsoft is working with MTN Group (MTNOY), Africas largest telecommunications company, to distribute Microsoft 365 and its Copilot digital assistant to about 300 million subscribers.

The Elevate program is designed to expand AI literacy and reduce cost barriers that might otherwise limit adoption, according to regional leadership.

The push comes as Chinese technology firms expand their footprint across the continent, with DeepSeeks open-source models accounting for roughly 11% to 14% of chatbot use in several African markets and reaching about 20% in countries such as Ethiopia and Zimbabwe following investments tied to digital infrastructure and telecom networks.

Microsoft is also increasing its infrastructure investment in the region.

In South Africa, the company plans to invest 5.4 billion rand, or about $330 million, to expand its cloud and AI capacity by the end of next year, while it is also exploring plans for a geothermal-powered data center in Kenya.

Early corporate adoption is emerging across the continent, with South African grocer Spar Group using Copilot in ways that save more than 700 employee hours annually and Nigerias Access Holdings integrating AI into daily workflows.

Regional leadership has suggested broader AI adoption could potentially contribute up to $1.5 trillion to Africas gross domestic product by 2030 if governments and businesses continue investing in digital infrastructure and AI skills.

 


Kindly share this post
Continue Reading

E-Business

Kaspersky Uncovers a New Android Malware Campaign Disguised as Starlink Application

Published

on

Kindly share this post

Kaspersky Global Research and Analysis Team (GReAT) has uncovered a new Android malware campaign in which cybercriminals distributed the BeatBanker Trojan under the guise of the Starlink application for Android.

Threat actors primarily target users from Brazil; nevertheless, Kaspersky experts don’t rule out that users from other countries may also face this threat.

The Trojan employs a Monero cryptocurrency miner and additionally installs a BTMOB remote administration tool (RAT) on the infected devices. To maintain its persistence, BeatBanker uses an uncommon mechanism involving a nearly inaudible looped audio file.

“At first we saw BeatBanker being distributed under the guise of a public services app; it installed a banking Trojan in addition to a cryptocurrency miner. However, our recent detection efforts uncovered a new campaign with another BeatBanker variant that deploys the BTMOB RAT instead of the banker module.

The attackers appear to be using a fresh lure with the Starlink app to reach more victims from different countries. Therefore, it is important for users to stay vigilant and use advanced solutions to protect their smartphones,” comments Fabio Assolini, Head of the Americas & Europe units at Kaspersky GReAT.

Initial vector of infection

Kaspersky experts believe that cybercriminals distribute a fake Starlink application containing the BeatBanker Trojan through phishing pages that mimic the Google Play Store. After execution on a compromised device, the Trojan displays a user interface that also mimics Google Play. Cybercriminals trick victims into granting installation permissions, thus allowing the download of additional hidden malicious payloads.

Crypto mining and BTMOB RAT module

When a user clicks UPDATE on the fake Google Play page, a Monero cryptocurrency miner deploys. BeatBanker monitors battery percentage and the temperature of an infected smartphone, as well as user activity after which a hidden cryptocurrency miner is started or stopped.

The Android Trojan also installs a BTMOB RAT on the compromised device. BTMOB enables full remote control and is sold as Malware-as-a-Service.

It is capable of automatic granting of permissions, hide system notifications and has mechanisms designed to capture screen lock credentials, including PINs, patterns and passwords on compromised devices. The malware also gives cybercriminals access to the front and rear cameras, GPS location monitoring and constant collection of sensitive data.

To ensure persistence and hinder uninstallation, BeatBanker maintains a fixed notification in the foreground and activates a foreground service with silent media playback. This tactic is designed to prevent the operating system from removing the malicious process.

Kaspersky’s products detect this threat as HEUR:Trojan-Dropper.AndroidOS.BeatBanker and HEUR:Trojan-Dropper.AndroidOS.Banker.*.

 


Kindly share this post
Continue Reading

Trending