Skip to main content

Waves of cyber attacks hit Netflix, Spotify, Twitter





If you live on the East Coast and had trouble accessing Twitter, Spotify Netflix, Amazon or Reddit Friday morning, you were not alone.
SAN FRANCISCO — At least two successive waves of online attacks blocked multiple major websites Friday, at times making it impossible for many users on the East Coast to access Twitter, Spotify, Netflix, Amazon, Tumblr and Reddit.
The first attacks appear to have begun around 7:10 am Friday, then resolved towards 9:30 am, but then a fresh wave began.
The cause was a large-scale distributed denial of service attack (DDoS) against Internet performance company Dyn that blocked user access to many popular sites standstill.Football to opera: One man's unlikely story of success
Dyn reported the sites going down at around 11:10 a.m. UTC, or roughly 7:10 a.m. ET, posting on its website that it "began monitoring and mitigating a DDoS attack against our Dyn Managed DNS infrastructure."
In an update posted at 8:45 a.m. ET, the company confirmed the attack, noting that "this attack is mainly impacting US East and is impacting Managed DNS customers in this region. Our Engineers are continuing to work on mitigating this issue."
White House Press Secretary Josh Earnest said the Department of Homeland Security was “monitoring the situation" but that “at this point I don’t have any information about who may be responsible for this malicious activity.”
It was unclear Friday if the attacks are focused on Dyn specifically or companies that it provides services to, said Carl Herberger, vice president of security at security company Radware.
The attack is “consistent with record-setting sized cyberattacks seen in the last few weeks,” he said.
He noted that easy-to-use computer code that allows even amateurs to create to create robot networks, so-called 'bot nets', to attack websites was released by hackers earlier this month
Amazon, whose web service AWS hosts many of the web's popular destinations including Netflix, also reported East Coast issues around the same time. In an update posted at 9:36 a.m. ET it said that it had "been resolved and the service is operating normally."
Amazon noted that it was suffering from a "hostname" issue and it was not immediately clear if it was related to the DDoS attack Dyn received.
Denial of service attacks are when someone, or a group of people, floods a particular site or service with large amounts of fake traffic in an attempt to overwhelm the system and take it offline. It was not immediately clear who initiated Friday's attack or why.
A post on Hacker News first identified the attack and named the sites that were affected. Several sites, including Spotify and GitHub, took to Twitter this morning to post status updates once the social network was back online.
Twitter users similarly took to the service to keep lists of which sites were down and comment on the situation. The term DDoS quickly vaulted to among the top of the site's list of "Trending Topics" in the United States. 
"DDoS attack this morning takes out Reddit, Twitter & Spotify," wrote user @Anubis8. "Work productivity increases by 300%."
"Anyone else having a whole lot of trouble with sites loading properly this morning?," tweeted Emmy Caitlin. "Paypal is down, Twitter was down, Netflix half loading."
How the attack works
Dyn provides DNS service, effectively an Internet address book for companies and that’s what’s being attacked said Steve Grobman, chief technology officer for Intel Security.
DNS stands for Domain Name Servers. These are computers that contain databases of URLs and the Internet Protocol addresses they represent.
"If you go to a site, say www.yahoo.com, your browser needs to know what the underlying Internet address that’s associated with that URL is. DNS is the service that does that conversion,” said Grobman.
For example, the IP address for yahoo.com is 209.191.88.254.
The attack is on the Dyn server that contains that address book. Dyn provides that service to multiple Internet companies, so when someone types in twitter.com or tumblr.com or Spotify.com, via a complex series of jumps the address book is able to tell their browser which numerical IP address to look at.
The DDoS attack floods that server with illegitimate requests, so many that very few real requests can get through. The user gets a message that the server is not available. Service is intermittent because a few requests are sometimes still able to go through.
In addition, many sites keep cached address books their computers can refer to. However those caches always have a time limit on them and when that “time to live” expires, they must go back to the DNS server to confirm the IP address is valid. If the DNS server is unavailable, a site that was working could suddenly stop being available, said Grobman.
Follow Eli Blumenthal on Twitter @eliblumenthal
Elizabeth Weise covers technology and cybersecurity for USA TODAY. Follow her at@eweise.
This Distributed Denial of Service attack directed at a large financial institution is one of the largest ever recorded.


Labels

Labels:

Comments

Post a Comment

Popular posts from this blog

Jane the Virgin Season Finale Recap: The Wedding of Jane Gloriana Villanueva

Ivonne Coll as Alba, Gina Rodriquez as Jane, Andrea Navedo as Xo. If I could write this whole recap with emojis, there'd be several varieties of hearts, the running man, the dancing woman, and lots and lots of fires and heart-eyed faces. Those creepy dancing twin girls would also make an appearance. And there'd be a gun. My imaginary emoji recap is appealing because it's incredibly hard to come away from a blockbuster hour of television like "Chapter Forty-Four" and pull together coherent thoughts that aren't just "AHHH!" or "WHY would you get ICE for the DAMN CHAMPAGNE?!" or "OMG FACE OFF MASK!" or "Why isn't all of life just Jane and Rogelio doing that father/daughter dance forever?" But I'll give it a try. Jane the Virgin 's season finale is a narrative fireworks display, a shock-and-awe storytelling spectacular that short-circuits emotional processing centers with blazing confidence. It drops j...
Post a Comment
Read more

Who Is Zuleyka Rivera? 5 Things To Know About The ‘Despacito’ Actress

With ‘Despacito’ up for Record of the Year at the 2018 Grammy Awards, here’s everything you need to know about the music video’s actress — Zuleyka Rivera! 1. She’s a renowned beauty queen.  Not only did she claim the Miss Universe Puerto Rico title, Zuleyka eventually took the top prize and was later crowned Miss Universe in 2006. 2. After her huge Miss Universe win, she studied acting and eventually became a TV star.  She now lives in Miami where she’s frequently a special guest or a host on shows like  Un Nuevo Dia  on Telemundo and  Despierta America  on Univision. Before that, she became a breakout star by appearing on several Televisa soap operas in Mexico. 3. In addition to modeling, she also owns her own clothing line.  On top of running her own teen-ware clothing collection, she also has three fragrance lines called the Karisma, Zuleyka and Zuleyka 2010. If that wasn’t impressive enough, she also started an amazing swims...
Post a Comment
Read more

The Zipless, First-Person Violence of “Hardcore Henry”

The movie’s hyperkinetic action was shot using tiny GoPros. CREDIT STX ENTERTAINMENT / COURTESY EVERETT Raised from a watery chamber resembling a womb, Henry, a full-grown man, looks out on the world as if for the first time. Viewers see Henry’s world through his own eyes (which is how all of “Hardcore Henry” is made), and his prospects seem circumscribed. Henry finds himself in a hospital-like setting; he’s unable to speak, and he’s missing an arm and a leg. In short order, however, a medical professional named Estelle (Haley Bennett) fits him with high-tech prostheses, which she snaps into place, attaches to his body, and covers with a coating of his own skin. Henry is also suffering from memory loss, and Estelle reminds him of one detail: they’re husband and wife. When armed invaders breach the operating room, Henry discovers what Estelle already knew—that they’re someplace in the sky, inside an airplane—and husband and wife clamber through vents to reach a conveniently located ...
Post a Comment
Read more