Massive DDOS attack targeting Pakistan's Infrastructure.

[Meliodas]

I guess they forgot to put this

Captha has another rpurpose it's not there to stop ddos attacks.

 

[RescueRanger]

I could write whole thesis on the subject. Cyber security really sucks. Pakistan really needs to up its cyber security.

Pakistan needs to understand one thing very clearly. It has many enemies and some sit very close to our borders. These people will use all avenues at their disposal to attack. The state needs to wake up and start acting like it is living in this century. Cyber security is a must.

100% agree, Pakistan's residential and commercial users are is still using DLink routers which haven't been patched for the uPNP exploit:

Example of a NAT Upnp injection script utilised against Pakistani routers previously:

Weaponised Urdu Font on a word document:

Filename:EOI-Application_Form.inp md5:d9279f628c9f19420f14edf3cfc3123f c2:officeupdater[.]org

Weaponised Word Document using InPage exploit:

And to top it all off our National Cyber Crime centre's website is still using HTTP protocol.

 

[The Eagle]

Indian cyber threat exists and even US reports says that Indians uses WINDOWS to spy on China and Pakistan. D.C knew the culprits before as well.

 

[Meliodas]

100% agree, Pakistan's residential and commercial users are is still using DLink routers which haven't been patched for the uPNP exploit:
View attachment 778792

Example of a NAT Upnp injection script utilised against Pakistani routers previously:
View attachment 778794

Weaponised Urdu Font on a word document:
View attachment 778795
Filename:EOI-Application_Form.inp md5:d9279f628c9f19420f14edf3cfc3123f c2:officeupdater[.]org

Weaponised Word Document using InPage exploit:
View attachment 778797
View attachment 778798

And to top it all off our National Cyber Crime centre's website is still using HTTP protocol.
View attachment 778799

That http thing is a true irony wonder what USA imported advisors are doing about it for ik.

 

[RescueRanger]

I was gonna ask him about the relationship between a DDoS attack (by flooding a server) and captcha (to separate a human from a machine) but the I saw recueranger the op who is also a think tank consultant liking this absurd post so I said never-mind this is PDF where anything is possible

A captcha prevents an attacker from performing more database-intensive operations that may cause a DoS via CPU or memory exhaustion.

Handling System Overload Resulting from DDoS Attacks and Flash Crowd Events

This paper presents a system that provides mitigation for DDoS attacks as a service, and is capable of handling flash crowd events at the same time. Providing DDoS protection as a service represents an important solution especially for Websites that have limited resources with no infrastructure...

ieeexplore.ieee.org

 

[Aesterix]

OK.....I admit.....it was me.
Sawry

 

[HttpError]

A captcha prevents an attacker from performing more database-intensive operations that may cause a DoS via CPU or memory exhaustion.

Handling System Overload Resulting from DDoS Attacks and Flash Crowd Events

This paper presents a system that provides mitigation for DDoS attacks as a service, and is capable of handling flash crowd events at the same time. Providing DDoS protection as a service represents an important solution especially for Websites that have limited resources with no infrastructure...

ieeexplore.ieee.org

I heard Cloudflare offers good anti-DDOS services. Well, Load balancing is another great factor to consider against such attacks. I mean hiring DDOS services on the Dark web is easily doable.

 

[doorstar]

A captcha prevents an attacker from performing more database-intensive operations that may cause a DoS via CPU or memory exhaustion.

Handling System Overload Resulting from DDoS Attacks and Flash Crowd Events

This paper presents a system that provides mitigation for DDoS attacks as a service, and is capable of handling flash crowd events at the same time. Providing DDoS protection as a service represents an important solution especially for Websites that have limited resources with no infrastructure...

ieeexplore.ieee.org

thanks, post deleted.

 

[airmarshal]

I dont think Pakistan is even ready for a cyber attack. This is a new frontier of war. Our enemy is very focused on us. Disinformation, terror, investing in 5th columnists. I dont think we dont even appreciate this whole range of weapons India has deployed against Pakistan.

 

[RescueRanger]

I heard Cloudflare offers good anti-DDOS services. Well, Load balancing is another great factor to consider against such attacks. I mean hiring DDOS services on the Dark web is easily doable.

The problem is that the majority of people hired as infosec managers hired by entities vulnerable to attack are just a warm body cashing in their monthly pay-cheque.

 

[Pappa Alpha]

I hate that we have such a reactive approach when it comes to our national defense.

 

[HttpError]

The problem is that the majority of people hired as infosec managers hired by entities vulnerable to attack are just a warm body cashing in their monthly pay-cheque.

This is what happens when you appoint People who were born in 60's as the head of IT and Sarkari Babus who know have 0 knowledge or experience about such technologies. Most of them who know have already moved abroad, as such skills are highly desirable or remaining ones are working in private sectors already planning to go abroad.

 

[RescueRanger]

This is what happens when you appoint People who were born in 60's as the head of IT and Sarkari Babus who know have 0 knowledge of experience about such technologies. Most of them who know have already moved abroad as such skills are highly desirable or remaining ones are working in private sectors already planning to go abroad.

Yes I agree, there are some very good people in Pakistan, some of them have published research in peer reviewed journals, but as always no respect for human capital, and then people cry about "brain drain" and "overseas Pakistani". How about you start respecting your indigenous talent and nurturing them, then they wouldn't have to leave.

There was a time Rakuten came to Pakistan to take our best and brightest in the IT sector to Japan, what did the government do to reduce the human capital flight? Nothing!

 

[AZ1]

research paper, theory blah blah wouldnt help. To stop this one must have real time experience dealing the attacks then he have knowledge how to stop this.

 

[RescueRanger]

research paper, theory blah blah wouldnt help.