Surely by now we have all heard terms like bot-net, malware, viruses computers etc. We at iguru have several times written articles with methods of prevention, or analyzes of categories and more specialized ways of dealing with computer threats.
This article is dedicated to a specific regular hacking that we have been listening to since last September and unfortunately we will continue to hear it in the future. This tactic is known as Attack Dos or DDos and the average user can not cope with antivirus now.
What is Dos and what DDos?
In a DoS attack, the attacker causes the IP address of the target device to be congested, with external, unnecessary communication requests constantly sending requests from the attacker to the server to keep it busy, making it impossible or time consuming to connect the device to the Internet. The attack is directed at the IP address of the target device.
The above can be done very easily from any terminal.
In contrast, in a DDoS attack, the attacker uses malicious software installed on multiple computers to detect and attack the target device. Invaders launching a DDoS attack choose this type of attack to get a bigger hit on the target device than a DoS attack that starts with a single device.
How can I know if I'm attacking?
If your device is being attacked by DoS or DDoS, you may not be able to connect to the Internet or the device being attacked will be disconnected. The goal in a few words of this particular way of attack is blackout.
What is the IoT we are listening to over the last few months and what role does it play in DDos attacks?
Internet of Things (IoT), is a new term coined with Kevin Ashton, co-founder and executive director of the Auto-ID Center (an MIT research consortium), during a Procter & Gamble presentation. As "things" he referred to objects which are now able to connect and share data via a network, whether they are sports shoes that count time and steps, whether they are decoders, routers, or medicine boxes that remind patients to take their medicine, etc.
In the vision of the Internet of Things, objects create a diffuse system and are interconnected using multiple (usually small) communication technologies. RFID tags are one of the first examples in this field. However, over time, this has led to new technologies that make communication between objects more efficient. The IEEE 802.15.4 standard stands out among them and the recent modification of IEEE 802.15.4e can significantly increase the reliability of radio frequency connections and energy efficiency, thanks to the adoption of the access mechanism.
Mirai malware.
"Mirai” which in Japanese means “the future”, is the name given to the malware specifically designed to infect IoT devices, which on September 20 last took part in one of the largest DDos attacks ever. Some of the targets were Twitter, GitHub, Reddit, Netflix, Airbnb and many others such as the French provider OVH. And also a configuration of this particular malware was yesterday's almost successful attack on Deutsche Telecom.
Malware was designed to infect Linux systems and synchronize the attack.
It is open source after all safe;
One of the questions that immediately comes to my mind is the following.. We keep hearing about the security that Linux provides with its Kernel, and surely anyone who frequents online forums for Linux enthusiasts will surely have read at least once the saying " Linux has no viruses”! The above confirms my own opinion that "no one deals with Linux" and if they decide to deal with it, here are Results. And Linux isn't just about Ubuntu! Linux is also running on the router we are currently connecting to the internet from our house!
The evil of the case is that each of us can with basic knowledge find the source code, format it, adapt it to a device and set up an IoT! A smart toaster that reminds you of your decadence with a message on the cell phone! If I can synchronize a large number of such totes to transmit data at once, I can create big problems in a whole country! Made of tape like that? And yet we've already experienced it!
Do we need to set some security terms and protocols to use open source?
