Metasploit still under siege in a third round of attacks as of this morning
Several renowned white-hat hacker security sites have been hit during the past few days with a distributed denial-of-service attack (DDoS). Immunity, Milw0rm, and Packet Storm were in the clear as of this posting, but attackers were still hammering away at Metasploit.
The attackers behind the DDoS -- which began on Feb. 6 and continued through the weekend on most of the sites -- deployed a massive botnet of some 80,000 zombies to flood the sites' domains with HTTP requests, according to Cisco researchers.
HD Moore, creator of Metasploit, says the DDoS' incoming connection rate exceeded 15 Mbps and used SYN packets. He has temporarily rerouted Metasploit's traffic here while he continues to gather more data on the attack as well as the culprit.
"It's the same flood, same request, etc., as the one on Friday," Moore says. The attack on Metasploit started with around 80,000 connections per second, and was at around 10,000 connections per second last night before rising again to around 60,000 later in the evening, he says.
Moore says the attack is not sophisticated, but it's "annoying."
"So far it just seems to be an ego thing -- someone with a chip on their shoulder and a botnet on hand being an idiot," says Moore, who is currently gathering a list of sources of the attack, which he plans to use to block the attacker altogether.
One of the other victimized security sites apparently tried this tack during the weekend, he says, and then the attacker switched from SYN to UDP packet flooding to keep the DDoS alive.
Moore says DDoS'ing an open-source project such as Metasploit is mainly a nuisance attack because "it's not like we're losing sales."
Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message
About the Author(s)
You May Also Like
The fuel in the new AI race: Data
April 23, 2024Securing Code in the Age of AI
April 24, 2024Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024