DDOS knocks antispam sites offline

Several antispam organizations have been targeted by an attempt to knock them offline, according to the SANS Institute.

Other stories on this topic
New type of image spam hides in e-mail wallpaper 6/13/2007
Symantec releases beta of new enterprise product 6/13/2007
FBI: Operation Bot Roast finds over 1 million botnet victims 6/13/2007
Powered by Inform
RSS feed

SANS' Internet Storm Center (ISC) said a "pretty big" distributed denial of service (DDOS) offensive had targeted several high-profile organizations, including Spamhaus, SURBL (Spam URI Realtime Blocklists) and URIBL (Realtime URI Blacklist).

Rules Emporium, a site hosting rules for the open source SpamAssassin antispam program, was also offline, and may have been targeted as well, according to ISC handler Bojan Zdrnja.

As of Monday, Rules Emporium and URIBL were still not reachable, while Spamhaus and SURBL appeared to have recovered.

"It looks like some antispam groups managed to get the attack(s) under control, let's hope the things will stay that way," Zdrnja wrote.

Denial of service attacks are a routine risk for antispam groups, but the current attack is similar to those carried out against Blue Security just over a year ago using botnets controlled by the Storm malware, according to SANS. The attacks caused Blue Security to exit the antispam business.

The ISC's Zdrnja suggested that such attacks may be a good sign for the effectiveness of antispam tools.

"Spammers seem to be desperate when they launch DDOS attacks, otherwise they would just keep sending spam, instead of using their resources this way," he wrote.


Recent News:
· McColo takedown: Vigilantism or Neighborhood Watch?
· Spam drop could boost Trojan attacks
· Hosting firm shutdown forces botnets to relocate
· ISP cut off from Internet after security concerns
· Spam plummets after hosting service shuttered