Conversation

Notices

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:02:49 JST Kevin Beaumont

   in reply to

   #NoName DDoS targets for today are in Czech Republic.

   www.mfcr.cz
   www.army.cz
   aobp.cz
   www.mpsv.cz
   www.penize.cz
   www.cssz.cz
   mmr.gov.cz
   www.kdpcr.cz
   www.alv-cr.cz
   www.egap.cz
   www.kbp.cz
   www.komora.cz
   uohs.gov.cz
   www.soud.cz
   www.nku.cz
   www.justice.cz
   www.nkcr.cz

   Botnet config: https://github.com/GossiTheDog/Monitoring/blob/main/NoName/targets_2023_12_27_10am.txt

   #threatintel

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:02:51 JST Kevin Beaumont

     If it helps anybody prepare for attacks like this, here's an example - init.lt is a telco in country, here's the attacker config.

     The infrastructure is on prem.
     #NoName don't have much bandwidth as Ddosia is small, what they rely on is webapps failing over under stress.

     Each campaign NoName run has a unique ID - when they find an easily downable target, they save the target campaign details and rerun it in the future over and over again on different days to make themselves appear busy.