The Top 10 Reasons Why SMBs Should Invest in the Cloud
Let’s Talk Request a Virtual Meeting “In Person” Schedule a Virtual Meeting
January 7, 2021
No Comments
The
DDOS
attack
The DDOS Attack
Hacked WordPress sites force visitors to DDoS Ukrainian targets
Hackers are compromising WordPress sites to insert a malicious script that uses visitors’ browsers to perform distributed denial-of-service attacks on Ukrainian websites.
Today, MalwareHunterTeam discovered a WordPress site compromised to use this script, targeting ten websites with Distributed Denial of Service (DDoS) attacks.
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.
The DDoS attacks will occur in the background without the user knowing it’s happening, other than a slow down of their browser.
This allows the scripts to perform the DDoS attacks while the visitor is unaware that their browser has been coopted for an attack.
Each request to the targeted websites will utilize a random query string so that the request is not served through a caching service, such as Cloudflare or Akamai, and is directly received by the server being attacked.
For example, the DDoS script will generate requests like the following in a web server’s access logs:
"GET /?17.650025158868488 HTTP/1.1"
"GET /?932.8529889504794 HTTP/1.1"
"GET /?71.59119445542395 HTTP/1.1"BleepingComputer has only been able to find a few sites infected with this DDoS script. However, developer Andrii Savchenko states that hundreds of WordPress sites are compromised to conduct these attacks.
