Quote:
Originally Posted by chupacabra
heh... in that case maybe we should all be pooling into a donation box to hire "someone" to knock them off the web for a nice long stretch... would be a thing of beauty to see all those links go dead simultaneously and stay down..
|
As much fun as doing that is.....it isn't a solution.....coz as soon as you stop
they can continue business as usual.....apart from the risk of everything
involved when getting caught for doing it. To stay ahead of getting caught
you can't run such attack longer than a few seconds from the same box.
To do this effectively requires as many boxes you can get access to and
hook em up in a botnet to distribute the attack...that's also what really
makes it tricky to block the attack because it comes from a big number
of different origin. using 1 or a few boxes blocking the ip of them solves
the whole problem in less than 2 seconds ;-)
When it's distributed the only other important thing is to cause sling more
data/traffic their way then they can handle......which is quite easy with
a decent number of drones in your botnet.
Most boxes that get hacked are being hacked to used for stuff like this.
Usually they make a script that just scans whole networks for live servers
and vulnerabilities they are able to exploit....so each one the script finds
gets compromised automagically by the script and installed with some
stuff to be used by the person without even having to touch or access
the server himself.......
There's tons and tons of hacked servers who run outdated os and software
most of them their owners never even know or notice that it's been hacked.
coz they don't touch or break anything which could make someone wonder
if perhaps something is wrong.......it's so easy and there's so many servers
that are vulnerable to being exploited you simply cannot believe it. I still
can't believe it though I'm seeing it almost every day first hand......if the
frequency I encounter is is even half of it on a big scale it's something
like 8 out of every 100 servers that are online.......don't pin me on the
numbers I don't have solid data to back them up
