Connect with us

E-Business

DDoS Perpetrators Change Tactics, Launch High-Bandwidth Attacks

Published

on

Stuart Scholly, president at Prolexic
Kindly share this post

Prolexic Technologies, the global leader in Distributed Denial of Service (DDoS) protection services, has reported that DDoS perpetrators changed tactics in Q3 2013 to boost attack sizes and hide their identities.

 This observation is one of many key findings found in the company’s Q3 2013 Global DDoS Attack Report, which was published today, and can be downloaded from www.prolexic.com/attackreports.

“This quarter, the major concern is that reflection attacks are accelerating dramatically, increasing 265 percent over Q3 2012 and up 70 percent over Q2,” said Stuart Scholly, president of Prolexic.

“The bottom line is that DDoS attackers have found an easier, more efficient way to launch high bandwidth attacks with smaller botnets and that’s concerning.”

Attackers are flocking to so-called distributed reflection denial of service (DrDoS) attacks as they provide the benefit of obscuring the source of the attack (anonymity), while enabling the bandwidth of intermediary victims to be used, often unknowingly, to multiply the size of the attack (amplification). In DrDos attacks, there are always two victims, the intended target and the intermediary. 

Prolexic’s latest report reveals that the total number of attacks against its clients in Q3 2013 remained high and represented the highest total for one quarter.

This occurrence illustrates a consistently heightened level of DDoS activity around the world over the last six months. Of note, more than 62 percent of Q3 DDoS attacks originated from China, far surpassing all other countries.

Findings are based on data gathered from attacks launched during the quarter against Prolexic’s global client base.

For the quarter, peak bandwidth averaged 3.06 Gbps and peak packets-per-second (pps) averaged 4.22 Mpps. The largest attack Prolexic mitigated during Q3 was directed at a European media company, peaking at 120 Gbps.

Summary highlights from Prolexic’s Q3 2013 Global DDoS Attack Report said that compared to Q2 2013, there was 1.58 percent increase in total DDOS attacks

There are also 6 percent decrease in application layer (Layer 7) attacks; 4 percent increase in infrastructure (Layer 3 & 4) attacks; and   44 percent decrease in the average attack duration:  21.33 hours vs. 38 hours during the period.

Compared to Q3 2012 there was 58 percent increase in total DDOS attacks; and 101 percent increase in application layer (Layer 7) attacks

Also there are 48 percent increase in infrastructure (Layer 3 & 4) attacks; and 12.3 percent increase in the average attack duration: 21.33 hours vs. 19 hours during the period.

Prolexic data for Q3 2013 shows a 70 percent increase in reflection attacks (DNS and CHARGEN) over the previous quarter and a 265 percent increase over the same quarter last year.

This rise in DrDoS attacks should come as no surprise, as attack methods that inflict high damage with low effort will always be popular.

“DrDoS attacks don’t require as many bots because the amplification factor is so large,” explained Scholly.

“Because less outbound bot traffic is needed, the botnet can be much smaller. This makes it easier for these botnets to fly under the radar unless you know what to look for.”

Prolexic has closely monitored DrDoS attacks for the last 12 months and has correctly forecasted their increasing popularity, as discussed in a series of four white papers on this resurfacing attack methodology.

“Q3 data also shows that infrastructure attacks maintained their share of total attacks, but within this group there was a big jump in UDP attacks and a corresponding drop in SYN attacks,” said Scholly.

“Combined with the rise in reflection attacks, this quarter showed a significant shift in attack methodologies that all businesses should be aware of.”

Prolexic’s latest attack report includes a detailed analysis of the trend toward reflection attacks, DrDoS reflection services within the underground marketplace.

The analysis examines DrDoS attack methods, tools and services – specifically CHARGEN attacks being integrated into the DDoS threatscape – and provides steps for remediating CHARGEN attacks.

A complimentary copy of Prolexic’s Q3 2013 Global DDoS Attack Report is available as a free PDF download from www.prolexic.com/attackreports. Prolexic’s Q4 2013 report will be released early in the first quarter of 2014.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Firm Warns of Blackmail from Alleged “Hackers”, “Law Enforcement” and “Hitmen”

Published

on

Kindly share this post

Attackers are incorporating personal details like full names and phone numbers in scam emails to appear credible and induce panic among victims. Scammers may pose as hackers with compromising data, law enforcement agencies issuing fake summons, or even hired assassins demanding ransoms. These threats often leverage techniques to evade email filters and other security solutions, underscoring the need for heightened vigilance.

In the most common variant, scammers impersonate hackers who claim to have infiltrated the victim’s devices. They allege to have access to cameras, microphones, browsing history, and sensitive files, often threatening to release explicit content captured via webcam or screen recordings supposedly taken whilst the victim was watching adult content.

Demands typically involve hundreds of US dollars in cryptocurrency, with promises to delete the data upon payment. These emails may include detailed narratives of the supposed breach, including explanations of malware types and advice on better security – ironically, tips that align with genuine best practices.

Another scam twist involves fraudsters posing as hired hitmen. In this scheme, the sender claims a contract has been placed on the victim’s life but offers to spare them if they outbid the original payer.

The email includes a cryptocurrency wallet for the ransom, framing the scammer as a “merciful” intermediary. This variant relies on fear rather than embarrassment, promising the victim’s life in exchange for payment.

Another prevalent tactic sees scammers masquerading as law enforcement agencies, such as Europol. Victims receive emails with attached PDF or DOC files containing fake summonses accusing them of serious crimes like child exploitation, exhibitionism, or human trafficking.

These documents cite fabricated articles of legal codes, feature forged signatures and seals, and urge immediate contact via a provided email to “resolve” the matter. Upon response, the “authorities” demand paying fines to avoid prosecution, often leading to cryptocurrency transfers.

“To slip past protective solutions, scammers employ various evasion tactics. These include embedding the main threat in attachments to avoid body text scanning, mixing letters from different alphabets (e.g., replacing Latin letters with similar Cyrillic ones), adding diacritical marks via HTML codes, varying fonts in HTML markup, inserting random symbols or punctuation between words, and hiding text in invisible HTML tables.

“Such “noise” makes detection by security solutions more difficult, as each email variant appears unique while remaining readable to humans. For example, cryptocurrency wallet addresses might be obscured with HTML entities to evade filters without hindering the victim’s ability to copy them,” comments Anna Lazaricheva, Senior Spam Analyst at Kaspersky.

 


Kindly share this post
Continue Reading

E-Business

Nigeria to Unveil Single-Entry Emergency Passport for Citizens Abroad

Published

on

Kindly share this post

Nigeria Immigration Service (NIS) is developing a Single-Entry Emergency Travel Passport (STEP) to replace the current Emergency Travel Certificate (ETC).

Nigeria to Unveil Single-Entry Emergency Passport for Citizens Abroad

STEP will aid stranded Nigerians abroad; aligns with broader immigration and border control reforms

Comptroller General Kemi Nanna Nandap announced the initiative this week during a policy meeting organized in partnership with the French government.

Nandap explained that the STEP will serve as a temporary travel document for Nigerian citizens abroad whose passports have expired, been lost, or stolen, enabling them to return home safely.

The new document is part of broader immigration reforms aimed at strengthening identity management and border control in line with global standards.

Since May 2025, Nigerian authorities have been pursuing wide-ranging immigration reforms focused on expatriate management and the visa system.

The measures seek to prevent misuse of expatriate quotas, encourage skills transfer, and streamline immigration procedures through digitization.

The reforms also reinforce the fight against human trafficking and migrant smuggling through tighter border control and better-coordinated migration management.

In October, authorities launched nationwide inspections targeting undocumented foreign nationals, particularly those who had overstayed their visas or violated entry conditions.

Offenders face sanctions such as overstay fines, deportation, and possible future entry bans.

The new STEP will be issued at designated Nigerian embassies and consulates abroad and will be valid for a single entry only.


Kindly share this post
Continue Reading

E-Business

NITDA Highlights Economic Impact, Digital Transformation Gains, as ICEGOV 2025 Concludes in Abuja

Published

on

Kindly share this post

The National Information Technology Development Agency (NITDA) has hailed the successful conclusion of the 18th International Conference on Theory and Practice of Electronic Governance (ICEGOV 2025) as a landmark moment for Nigeria’s digital economy aspirations, citing its direct contribution to research excellence, global collaboration and the nation’s ongoing digital transformation agenda.

Hosted in Abuja under the patronage of President Asiwaju Bola Ahmed Tinubu, ICEGOV 2025 convened global experts for four days of rigorous debate, innovative research presentations, and high-impact partnerships, a convergence that NITDA says aligns closely with the President’s redefined priority area of accelerating economic diversification through industrialisation and digitisation.

The conference, a United Nations University (UNU-EGOV) initiative founded in 2007, brought together academia, industry leaders, civil society, development institutions and government actors to shape the future of electronic governance. This year’s edition placed Nigeria at the center of global digital discourse, showcasing the country’s rising intellectual and technological capacity.

A total of 151 scientific papers were submitted by 308 authors from 33 countries, with emerging economies accounting for 68% of participating scholars, a clear sign of the conference’s inclusive reach. Nigeria led global submissions with 102 authors, followed by Brazil, India, Portugal and Greece.

NITDA emphasised that this strong participation reflects the Agency’s decade-long investment in digital talent development, research funding and ecosystem strengthening, which are investments that are already translating into local and international recognition.

The conference also honoured outstanding research through its Best Paper Awards. Notably, Robert Ifeonu of the Central Bank of Nigeria earned the top award in the Research category for his paper “Micro-Transformation Framework for Public Sector Innovation: Catalysing Resilient, Outcome-Driven Digital Governance.” This, NITDA noted, underscores Nigeria’s emerging leadership in developing home-grown digital governance models capable of driving socio-economic impact.

In her closing remarks, Professor Delfina Soares, Director of UNU-EGOV, extended appreciation to NITDA Director-General, Kashifu Inuwa CCIE, for his early endorsement and strategic leadership in bringing ICEGOV to Abuja. She noted that the local partnerships and sponsorships facilitated by NITDA significantly enhanced the conference’s global value and strengthened Africa’s position in digital governance research.

Speaking on the event’s economic and strategic implications, NITDA affirmed that hosting ICEGOV 2025 delivered multiple layers of value, from boosting Nigeria’s reputation as a digital innovation hub to fostering partnerships that will stimulate new investments, research collaborations and capacity-building programmes.

The Agency added that insights and tools shared during the conference will further accelerate the actualisation of its digital transformation agenda, strengthen public sector efficiency and support the Federal Government’s commitment to economic diversification through digitisation and industrialisation. The knowledge exchange from ICEGOV, it said, will catalyse improved service delivery, enhanced regulatory frameworks and the deepening of Nigeria’s knowledge-driven economy.

As delegates departed Abuja carrying new research linkages and strategic commitments, NITDA reaffirmed its readiness to sustain the momentum, ensuring that Nigeria not only participates in global digital governance conversations but also shapes them.

 


Kindly share this post
Continue Reading

Trending