Network security company Corero says LDAP could amplify DDoS attacks by as much as 55x.

Dark Reading Staff, Dark Reading

October 26, 2016

1 Min Read

Network security firm Corero warned that the distributed denial-of-service (DDoS) threat landscape is evolving and could reach tens of terabits-per-second in size, after discovering a new zero-day attack vector that can amplify DDoS attacks by as much as 55x.

Corero said this new type of attack uses the Lightweight Directory Access Protocol (LDAP) and if combined with a Internet of Things botnet, could break records in DDoS power. The threat has loomed large particularly after the 655-Gigabyte attack on KrebsOnSecurity and subsequent discovery of the Mirai botnet, Corero said.

"LDAP is not the first, and will not be the last, protocol or service to be exploited in this fashion. Novel amplification attacks like this occur because there are so many open services on the Internet that will respond to spoofed record queries," said Corero's Dave Larson.

Read more on Corero's site.

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights