Conversation

Notices

1. Embed this notice
   Jérôme Meyer (jmeyer@infosec.exchange)'s status on Tuesday, 11-Mar-2025 06:52:20 JST Jérôme Meyer

   Supposed to be enjoying a week off skiing, but the X DDoS-related outage brought me back a bit.

   Hint: that attack has been botnet-driven.

   • Kevin Beaumont repeated this.
   • Embed this notice
     Jérôme Meyer (jmeyer@infosec.exchange)'s status on Tuesday, 11-Mar-2025 16:20:39 JST Jérôme Meyer

     in reply to

     About this X DDoS campaign: I've seen reports of attribution to Ukraine, and at least based on attack data at network level — I just don't see it. (And I should note: attribution is hard, so I am generally skeptical.)

     Top contributors are 🇺🇸🇲🇽🇪🇸🇮🇹🇧🇷, and as with most botnets: very geographically distributed.

     Most of the source IPs intersect with #Eleven11bot as we started seeing them on 26 February.

     OK, now back to regularly scheduled skiing.

     #threatintel

   • Embed this notice
     Metafrastis (dgavin@mastodon.online)'s status on Tuesday, 11-Mar-2025 21:21:19 JST Metafrastis

     in reply to

     • Kevin Beaumont

     @jmeyer @GossiTheDog WhoTF cares wether the worlds largest Nazi network is down? #Twitter and #Tesla and #SpaceX all have to die, the faster the better. Only then the #US have a chance to save their democracy.