Use of DNS reflector and amplification attacks on the Rise by Hackers

[mandy]

In a twist on distributed denial-of-service attacks, cybercriminals are using DNS servers--the phonebooks of the Internet--to amplify their assaults and disrupt online business.

Earlier this year, VeriSign experienced attacks on its systems that were larger than anything it had ever seen before, it said last week. The Mountain View, Calif.-based company, which helps companies do business on the Web, discovered that the assaults weren't coming from commandeered "bot" computers, as is common. Instead, its machines were under attack by DNS (domain name system) servers.

"DNS is now a major vector for DDOS," Dan Kaminsky, a security researcher said, referring to distributed denial-of-service attacks. "The bar has been lowered. People with fewer resources can now launch potentially crippling attacks."...

full article: http://news.com.com/DNS+servers+do+hacke...=nefd.lede

related topic:
DDoS Denial of Service Attacks: Network Security's Biggest Threat, Still
http://community.tuliptools.com/index.ph...196.0.html