GitHub, Twitter, and a long list of known websites are inaccessible for the majority of users worldwide due to the Distributed denial-of-service DDoS attack on the DNS infrastructure of cloud-based Internet management company Dyn.
In recent weeks, we saw the massive attack of 1Tbps DDoS attack at French company OVH, some experts called it a massive DDoS attack in history. This time the latest victim of the DDoS attack is the renowned Dyn DNS provider.
The long list of affected websites includes Esty, Twitter, GitHub, Spotify, PagerDuty, SoundCloud, Shopify, Airbnb, Heroku, and Intercom.
Called a “global event,” GitHub has informed users its upstream DNS is being affected by the attack. Twitter went offline for roughly 4 hours in total.
According to Dyn, the DDoS attack started at 11:10 UTC and affected its customers in the east of the United States. However, people in Asia and Europe have reported no such issue in their part of regions. According to DynStatus.
Investigation: Starting at 11:10 UTC on October 21st-Friday 2016 we began monitoring and mitigating a DDoS attack against our Dyn Managed DNS infrastructure. Some customers may experience increased DNS query latency and delayed zone propagation during this time. Updates will be posted as information becomes available.
Update: Dyn Managed DNS advanced service monitoring is currently experiencing issues. Customers may notice incorrect probe alerts on their advanced DNS services. Our engineers continue to monitor and investigate the issue. – 18:23 UTC
Update: This incident has been resolved. – 22:17 UTC
Experts at FlashPoint confirmed that the botnets used in the DDoS attacks at Dyn were affected by Mirai malware.
Increasingly, DDoS attacks against Internet Service Providers (ISPs) can be highly problematic, especially when the attackers are capable of conducting powerful attacks, such as Mirai, which is being used for DDoS attacks in increasing numbers after source code leaks.
Share this article
About the Author
Peter Buttler an Infosec Journalist and Tech Reporter, Member of IDG Network. In 2011, he completed Masters in Cybersecurity and technology. He worked for leading security and tech giants as Staff Writer. Currently, he contributes to a number of online publications, including The Next Web, CSO Online, Infosecurity Mag, SC Magazine, Tripwire, GlobalSign CSO Australia, etc. His favorite areas Online Privacy, AI, IoT, VR, Blockchain, Big Data, ML, Fintech, etc. You can follow him on twitter.
More from Peter ButtlerRelated Posts
Google and FBI Disrupt NetNut Residential Proxy Network Used by 2M+ Devices
Google worked with the FBI and Lumen to disrupt the NetNut residential proxy network, also known as ...
Opera Launches Paste Protect to Block ClickFix Clipboard Attacks
Opera’s Paste Protect blocks harmful commands from reaching the clipboard, preventing ClickFix...
Reddit Introduces Mandatory Age Verification for EU Teens Accessing NSFW Content
Reddit will require European Union users under 18 to verify their age before viewing mature or NSFW ...
Popular ‘Adblock for YouTube’ Chrome Extension Found With Remote Code Execution Risk
The popular “Adblock for YouTube” Chrome extension now carries an architectural weakness...
Texas Hunting and Fishing License Data Breach Affects 3 Million Customers
Approximately 3 million Texas hunting and fishing license customers were affected by a data breach i...
FBI Warns of ‘Kali365’ Subscription Service Targeting Microsoft 365 Accounts
The FBI’s sounding the alarm on Kali365, a site where criminals can pick up ready-to-use tools for s...
