In the last few months, the relationship between Russia and Ukraine has deteriorated to a great extent. The Russian government carried out a DDoS cyberattack on the official government websites of Ukraine in the initial months of 2022. Recently, the Russian government officially released a list of almost 17,576 IP addresses and 166 domains that are believed to be planning for a future DDoS attack in Russia.
This list is very long but there are a few interesting points that attract global attention. Some of the big leading domains listed by Russia’s National Coordination Center for Computer Incidents (NCCCI) include –
Also Read:- Measuring Cybersecurity Effectiveness to Avoid The Wrath Of CyberAttacks.
- fbi.com – U.S. Federal Bureau of Investigation
- cia.gov/index.html – U.S. Central Intelligence Agency
- usatoday.com/search/results?q= – U.S. news outlet
- korrespondent.net and ua.korrespondent.net – Ukrainian media outlet
- 24News.ge, megatv.ge – German news and media outlets
- tv8.md, stiri.md – Moldavian news and media outlets
- euroradio.fm – European Radio for Belarus
To prevent these attacks, NCCCI has advised the national organizations to enforce high security for the protection of their data through network devices, enabling logins and password changes with key infrastructure elements, turning off all the automatic software updates, disabling third-party plugins on websites, etc.
The hacker community is also taking sides in this situation. The hacker group called Anonymous has recently requested all the hacker groups globally to target Russia and initiate a cyberwar against Russia as revenge for invading Ukraine.
After this, a member of the Conti ransomware group accepted that he is of Ukrainian origin, and leaked the internal chats of the group after their leader posted a forceful pro-Russian message on their official site. The internal information was uncovered through an email that was given to many journalists and security specialists, among others.
Recently, the Ukraine government has also announced that they have created an IT army to fight the cybersecurity threat in the country. The employees are hired from different parts of the globe with an initial number of almost 2 lakh employees. They have announced their new targets as well, which consist of the Rail Network of Belarus, the Space-based satellite navigation system (GLONASS) of Russia, and operators like MTS and Beeline.
NCCCI has recommended several methods to counter these attacks, such as –
- Using anti-DDoS methods for the protection
- Restriction of network security
- Usage of Russian DNS servers
- Watch for phishing emails
- Turn off updates
- Enable data backups
- Setup of logins, etc.
The cyber monitoring organization of Russia, Roskomnadzor, has asked Google to stop showing video ads that showcase ‘false political information’ about Ukraine. In response to this, Google has to eventually stop its ads about the progressions between Russia and Ukraine. Facebook access within Russia has also been restricted as per the present situation.
Content Source:– https://www.linkedin.com/pulse/russia-released-list-multiple-ip-addresses-domains-ddos-dasaundhi/?trackingId=mRjZgMv0T9uTMbRbKaDN%2Bg%3D%3D
Of all DDoS attacks we tracked DDoS trend last year, the longest attack, captured in the fourth quarter, was active for 177 hours and 53 minutes.
Meanwhile, perpetrators are also inclined more towards the deployment of multivector attacks.
In fact, blending multivector approaches into APT attacks are being used as a cover to engage into something more evil and lethal.
To be more, precise, more than 76 % of attacks tracked last year targeted more than one vector.
NTP-based Attacks Soared Fourfold Last Year
Among many different types of volumetric attacks, NTP-based attacks, a subtype of UDP-based floods, witnessed a fourfold escalation as compared to the previous year, according to our research findings.
