Conversation

Notices

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:02:15 JST Kevin Beaumont

   And their post. #NoName #threatintel

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:02:14 JST Kevin Beaumont

     in reply to

     #NoName will announce targeting of UK later today. Some new targets this time.

     Targets:
     pa.eastcambs.gov.uk
     www.merlinscottassociates.co.uk
     politics.leics.gov.uk
     www.liverpool.gov.uk
     www.britishchambers.org.uk
     www.cranbrooktowncouncil.gov.uk
     www.wymetro.com
     my.swiftcard.org.uk
     ukfinanceproducationb2c.b2clogin.com
     www.moneyhelper.org.uk
     www.northlinkferries.co.uk
     www.justice.gov.uk
     www.cbi.org.uk
     www.scottishchambers.org.uk

     Botnet config: https://github.com/GossiTheDog/Monitoring/blob/main/NoName/targets_2023_12_28_10am.txt

     #threatintel

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:06:05 JST Kevin Beaumont

     in reply to

     #NoName DDoS targets today in Finland

     www.kyberturvallisuuskeskus.fi
     www.traficom.fi
     extidpevaluointi.traficom.fi
     extidptesti.traficom.fi
     ikkuna.traficom.fi
     extidp.traficom.fi
     www.op.fi
     www.suomenpankki.fi
     www.tilastokeskus.fi
     tem.fi
     valtioneuvosto.fi
     www.autotuojat.fi
     intermin.fi
     www.defmin.fi
     helsinki.chamber.fi
     www.wtc.fi
     kauppakamari.fi
     korkeinoikeus.fi
     vnk.fi
     arbitration.fi
     paaomasijoittajat.fi

     Botnet config: https://github.com/GossiTheDog/Monitoring/tree/main/NoName

     #threatintel

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:06:07 JST Kevin Beaumont

     in reply to

     Does anybody have NCSC UK contacts who could give Cranbrook Town Council a heads up they need to hide their origin server?

     They went behind Cloudflare as this is the 4th time, but they left their web server on Zen Internet exposed to everybody - so the attackers are still targeting that. It’s in the spreadsheet screenshot above.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:06:08 JST Kevin Beaumont

     in reply to

     And there's the announcement. They're so upset at Rishi they stopped trying to DDoS his website, as they failed last time.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:06:11 JST Kevin Beaumont

     in reply to

     Well done to NoName for attempting to DDoS a website that doesn't even exist any more.