NSFOCUS

Botnet Trend Report-4

July 10, 2019

3.2 Family Activity

3.2.1 Behavior Seen

In 2018, a total of 35 active families were found to issue more than 100 botnet instructions, accounting for 24% of all known families. Several families with the highest level of instruction activity accounted for most of the malicious activities throughout 2018.

(more…)

DDoS to Loom Large in the 5G Era

July 9, 2019

Today, 5G is around the corner and, in the foreseeable future, it will definitely bring more convenience to our lives. Higher rates of mobile terminals, more devices connected to the Internet of Things (IoT), more convenient remote services… All these will lead us to a brand new era of the Internet of Everything (IoE). With constant breakthroughs in technological innovation, cybersecurity should also move at the same rate. (more…)

BGP Hijackings Come Back!

July 5, 2019

A BGP hijacking event happened again! Following the event that the traffic supposed to be destined for Europe was leaked to China Telecom (June 9, 2019), another BGP hijacking occurred yesterday (June 25, 2019). Since Verizon, by mistake, accepted network misconfigurations by a minor Internet Service Provider (ISP), multiple Internet systems have fallen into a black hole. For example, Cloudflare, Facebook, and Amazon Web Services (AWS) among other companies experienced system failures. This raised public concerns of Border Gateway Protocol which a routing protocol for the Internet. (more…)

IP Reputation Report-07012019

July 4, 2019

Top 10 countries in attack counts: The above diagram shows the top 10 regions with the most malicious IP addresses from the NSFOCUS IP Reputation databases at June 30, 2019. Top 10 countries in attack percentage: First place changed from Laos to Suriname. The Palestine is in the second place. The country China (CN) has […]

Botnet Trend Report-3

July 3, 2019

This chapter discusses various aspects of botnet behavior. Behavioral characteristics include activity level of botnets overall and per botnet family, DDoS attack characteristics, C&C server use and distribution, and geographical locations of attack victims.  Also discussed are characteristics of the most active botnet families themselves. (more…)

DDoS in the Past Decade

July 1, 2019

1.0   Milestones 1.1   DDoS Size Expansion IP data source: The Zettabyte Era: Trends and Analysis The past decade has witnessed a steady growth in the peak size of DDoS attacks, especially in 2013 when the reflection method was used by attackers on a large scale and the DDoS attack size expanded at an exponential rate. […]

What You Should Know About Mitigation Bypass

June 28, 2019

Mitigation measures are implemented with many implicit assumptions. They can work only when these assumptions prove to be true and would be bypassed if these assumptions were broken. (more…)

IP Reputation Report-06242019

June 27, 2019

1. Top 10 countries in attack counts: The above diagram shows the top 10 regions with the most malicious IP addresses from the NSFOCUS IP Reputation databases at June 21, 2019.   Top 10 countries in attack percentage: The Laos is in the first place since four weeks ago. The Suriname is in the second […]

Botnet Trend Report-2

June 26, 2019

Botnets have evolved since 2017.  New active families and platforms have become dominant.  Attack types used have also changed. (more…)

Linux Kernel Multiple Remote Denial-of-Service Vulnerabilities Threat Alert

June 25, 2019

Overview

Recently, Red Hat released a security bulletin, pointing out multiple TCP-based remote denial-of-service vulnerabilities in the Linux kernel, namely, a SACK Panic vulnerability of important severity and two other vulnerabilities of moderate severity. (more…)

Search

Subscribe to the NSFOCUS Blog