A nation state is learning how to take the internet offline

Bruce Schneier: DDoS attacks are targeting companies that host the web

A nation state is learning how to take down the internet, according to IT security expert Bruce Schneier.

Hackers are launching major DDoS attacks on some of the companies who host the web's infrastructure, Schneier warned.

But the length and sophistication of these DDoS attacks are such that it is clear the hackers behind them are trying to learn the limit of the companies' defences.

Advertisement - Article continues below

Schneier said in a blog post: "One week, the attack would start at a particular level of attack and slowly ramp up before stopping. The next week, it would start at that higher point and continue. And so on, along those lines, as if the attacker were looking for the exact point of failure."

The point is not to crash these companies' systems immediately, he added, but to launch attacks on a variety of vectors that require the targets to reveal their entire defence capabilities. The hackers also hit them with probing attacks that manipulate internet addresses, seeing how long it takes for their defences to kick in.

"Someone is extensively testing the core defensive capabilities of the companies that provide critical internet services," Schneier said.

While the hosting providers spoke with Schneier anonymously, he said their findings tally with network security firm Verisign's DDoS trends report, which found attacks became more frequent, persistent and sophisticated in the spring of this year. 

Advertisement
Advertisement - Article continues below

Schneier ruled out hacktivists, researchers and cybercriminals, saying the size and scale of the attacks point to a nation state actor, most likely China.

"On the other hand, it's possible to disguise the country of origin for these sorts of attacks," he added.

Featured Resources

The case for a marketing content hub

Transform your digital marketing to deliver customer expectations

Download now

Fast, flexible and compliant e-signatures for global businesses

Be at the forefront of digital transformation with electronic signatures

Download now

Why CEOS should care about the move to SAP S/4HANA

And how they can accelerate business value

Download now

IT faces new security challenges in the wake of COVID-19

Beat the crisis by learning how to secure your network

Download now
Advertisement

Recommended

Visit/security/phishing/355810/zloader-malware-returns-as-a-coronavirus-phishing-scam
phishing

ZLoader malware returns as a coronavirus phishing scam

27 May 2020
Visit/security/hacking/355806/anarchygrabber-hack-steals-discord-tokens-ids-and-passwords
hacking

AnarchyGrabber hack steals Discord tokens, IDs and passwords

27 May 2020
Visit/security/hacking/355801/scammers-using-coronavirus-contact-tracing-in-hacking-attempt
hacking

Scammers leverage contact-tracing in hacking attempt

27 May 2020
Visit/security/phishing/355793/gitlab-phishes-its-remote-employees-and-1-in-5-fell-for-it
phishing

GitLab phished its employees and 20% handed over credentials

26 May 2020

Most Popular

Visit/infrastructure/server-storage/355785/dell-emc-poweredge-r7525-review-an-epyc-core-density-to-make
Server & storage

Dell EMC PowerEdge R7525 review: An EPYC core density to make Intel weep

26 May 2020
Visit/infrastructure/network-internet/355792/intel-releases-wi-fi-and-bluetooth-driver-updates-for
Network & Internet

Intel releases Wi-Fi and Bluetooth driver updates for Windows 10

26 May 2020
Visit/operating-systems/microsoft-windows/355781/microsoft-confirms-further-issues-with-troublesome
Microsoft Windows

Microsoft's latest Windows 10 update is causing yet more issues

26 May 2020