Massive DDOS attack targeting Pakistan's Infrastructure.

[RescueRanger]

PTA have issued a statement denying this report:

https://twitter.com/x/status/1439512476014428161

whats the latest update on it ? frankly spreaking I didn't experience internet outage last night at all...was using internt almost thru out the night at good speed

It depends on target vectors, our problem as a nation is we don't look at the threat in a holistic fashion until it comes crashing on our heads. This is a serious concern and the government is ignoring it, at their own peril!

 

[Enigma SIG]

Linux your servers dammit.

But then I remember people still use old outdated Windows.

 

[alee92nawaz]

PTA have issued a statement denying this report:

https://twitter.com/x/status/1439512476014428161

It depends on target vectors, our problem as a nation is we don't look at the threat in a holistic fashion until it comes crashing on our heads. This is a serious concern and the government is ignoring it, at their own peril!

There was no attack. Internet was working fine. I streamed 4k videos, just to make sure

 

[RescueRanger]

There was no attack. Internet was working fine. I streamed 4k videos, just to make sure

I will repeat myself here, just because you can use the internet doesn't mean there isn't a coordinated attack against the country or infrastructure. More information will come out in the next few days, of this I am 100% certain.

 

[RIP Pak LAW]

I will repeat myself here, just because you can use the internet doesn't mean there isn't a coordinated attack against the country or infrastructure. More information will come out in the next few days, of this I am 100% certain.

Probably you took Umair Saif tweet (without confirmation) seriously last night. Anyways you/him might be right as well, something might had happened but earlier you said that entire internet in Pak was crawled to dead zero speed which obviously wasn't the case.

 

[RescueRanger]

Probably you took Umair Saif tweet (without confirmation) seriously last night. Anyways you/him might be right as well, something might had happened but earlier you said that entire internet in Pak was crawled to dead zero speed which obviously wasn't the case.

Nope my friend works in NOC operations for a telco which I cannot mention for obvious reasons, he shared the information with me. But I will be the first to hold my hands up and say if I am wrong, I am wrong, but lets see if anything more comes out from this in the next few days. It's better if it's a non-issue, but if there is even an element of truth to it, then there is a serious concern about transparency.

 

[alee92nawaz]

I will repeat myself here, just because you can use the internet doesn't mean there isn't a coordinated attack against the country or infrastructure. More information will come out in the next few days, of this I am 100% certain.

Brother they said that internet would be very slow . I was only checking that. Internet was very slow a few nights ago for sure but not last night

 

[_NOBODY_]

Brother they said that internet would be very slow . I was only checking that. Internet was very slow a few nights ago for sure but not last night

Internet is fine today but for the last few days it was extremely slow.

 

[LeGenD]

100% agree, Pakistan's residential and commercial users are is still using DLink routers which haven't been patched for the uPNP exploit:
View attachment 778792

Example of a NAT Upnp injection script utilised against Pakistani routers previously:
View attachment 778794

Weaponised Urdu Font on a word document:
View attachment 778795
Filename:EOI-Application_Form.inp md5:d9279f628c9f19420f14edf3cfc3123f c2:officeupdater[.]org

Weaponised Word Document using InPage exploit:
View attachment 778797
View attachment 778798

And to top it all off our National Cyber Crime centre's website is still using HTTP protocol.
View attachment 778799

PTCL provides low-cost models of any company (commercial mentality to save costs). You may patch a PTCL-supplied router at your own risk.

PTCL provides low-cost models of ZTE now. Some users do not pay much attention to internal security settings either. Many do not understand the difference between TKIP or AES encryption methods for example, and which setting could be set as default.

TP-Link is very good IMHO.

Some Pakistani websites are lacking in security measures as well because respective owners are reluctant to pay for such measures.

And what to do about pirated copies of Microsoft Windows in use in supposedly professional institutes? No interest in buying original.

 

[messiach]

Distributive attacks are not so destructive in denial of service. They are usually for sniffing.

Probably you took Umair Saif tweet (without confirmation) seriously last night. Anyways you/him might be right as well, something might had happened but earlier you said that entire internet in Pak was crawled to dead zero speed which obviously wasn't the case.

Generally correct.
Install your own ssl-root certificates for general connectivity. Secure your side of connection.

PTCL provides low-cost models of any company (commercial mentality to save costs). You may patch a PTCL-supplied router at your own risk.

PTCL provides low-cost models of ZTE now. Some users do not pay much attention to internal security settings either. Many do not understand the difference between TKIP or AES encryption methods for example, and which setting could be set as default.

TP-Link is very good IMHO.

Some Pakistani websites are lacking in security measures as well because respective owners are reluctant to pay for such measures.

And what to do about pirated copies of Microsoft Windows in use in supposedly professional institutes? No interest in buying original.

 

[Pakistan Ka Beta]

This is a developing story, please wait for official confirmation from trusted sources.

since i read about these techs hacking i start hating them .

@RescueRanger @PanzerKiel

Same culprit as 10th Jan 2021

Indian cyber threat exists and even US reports says that Indians uses WINDOWS to spy on China and Pakistan. D.C knew the culprits before as well.

from certified CTO to Cyber Security specialist ...more respect for you

https://twitter.com/x/status/1439512476014428161

According to our IT minister sahb we have faced more than a million cyber attacks from india in last year or so.

My question is what have we done so far ?

1) We need to start educating babus and civil servants from bottom to top even till PM and COAS level about cyber space and threats/precautions etc.

We need to start offensive ops using APT level offensive groups (**** the laws if india doesn't abide by them why shall we? )

Increase APT level groups from 1 that we have and its subgroup to atleast 5 (of our own) then get Chinese, N.K. Iranian and Turkish hackers and put them with 4 more APT groups on rotatation basis.

Lastly develop a firewall and put your official website servers in Pakistan.

Cyber warfare is the future, I hope Pakistan take some major steps to secure their Financial and Military systems from such attacks.

Just ask Puneet or Raj at Windows , to help download a patch since we don't have a Own Operating System , we can trust Puneet and Raj at Windows support

What can possibly go wrong ?

whats the latest update on it ? frankly spreaking I didn't experience internet outage last night at all...was using internt almost thru out the night at good speed

Since the war in Afghanistan became a failure for very powerful nations and Pakistan has became the number 1 scapegoat IT and other infrastructure is a likely target. The government must initiate immediate measures to address shortcomings.

We can already see how sports is being exploited to send a message. No area will be spared. To remain in a lumber would be insanely criminal.

Internet is fine today but for the last few days it was extremely slow.

https://twitter.com/x/status/1439512476014428161

 

[RescueRanger]

https://twitter.com/x/status/1439512476014428161

https://twitter.com/x/status/1439512476014428161

 

[Pakistan Ka Beta]

View attachment 778884

This is fake story , developing is the one which is confirmed but have little information and we wait for further information .

 

[RescueRanger]

This is fake story , developing is the one which is confirmed but have little information and we wait for further information .

Okay thank you for your feedback.

 

[The Eagle]

https://twitter.com/x/status/1439512476014428161

https://twitter.com/x/status/1439512476014428161

Yes saw that. What I was referring to, is a different story.