{"id":181798,"date":"2016-10-07T09:03:52","date_gmt":"2016-10-07T07:03:52","guid":{"rendered":"http:\/\/mybroadband.co.za\/news\/?p=181798"},"modified":"2016-10-07T09:05:07","modified_gmt":"2016-10-07T07:05:07","slug":"a-look-inside-the-620gbps-ddos-attack","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/181798-a-look-inside-the-620gbps-ddos-attack.html","title":{"rendered":"A look inside the 620Gbps DDoS attack"},"content":{"rendered":"

On 20 September, Akamai successfully defended<\/strong><\/a> against a DDoS attack exceeding 620Gbps – nearly double that of the previous peak attack on its platform.<\/p>\n

That attack generated interest in the role of IoT devices in DDoS attacks and the\u00a0Mirai source code.<\/p>\n

\u201cBased on [an]\u00a0investigation and what we know from the DDoS attack, we can confirm that the Mirai botnet was a major participant in the attack,\u201d said Akamai.<\/p>\n

\u201cWhile there may have been at least one other botnet involved, we cannot confirm that the attacks were coordinated.\u201d<\/p>\n

Akamai said\u00a0it has been tracking the botnet for some time, and published a\u00a0Threat Advisory on its dangers.<\/p>\n

“The Threat Advisory detailed our examination of a known-vulnerable device in order to analyze trends in brute force login attacks on the Internet.”<\/p>\n

“The device existed on a Public IP and had open ports for listening services such as Telnet, SSH, HTTP, SMTP, and more.”<\/p>\n

“The first thing we observed was bots using default credentials associated with IoT and then we noticed commands that showed them attempting to load the malware.”<\/p>\n

Akamai\u00a0made the following observations:<\/p>\n