Performing Massive DDoS Attack by exploiting the Network Time Protocol.....!!!
1 min read

Improve in the use of a particular allocated refusal of support
(DDoS) technique known as Distributed Representation Denial of
Service strikes (DrDoS). Start and misconfigured DNS (Domain
Name System) can be used by anyone to take care of domains to IP
details are progressively misused to release highly effective DDoS
strikes.
But not only the DNS web servers, Protection Scientists at Symantec
have identified System Time Method (NTP) reflection DDoS strikes
being released by online scammers during the Xmas Vacations.
'Network Time Method (NTP)' is a allocated network time time
synchronization protocol that is used to connect pc time times in a
network pc systems and operates over slot 123 UDP.
NTP is one of those set-it-and-forget-it protocols that is configured
once and most network administrators don't worry about it after
that. Unfortunately, that means it is also not a service that is
upgraded often, leaving it vulnerable to these reflection attacks.
In this case, the attackers are taking advantage of the monlist
command. Monlist is a remote command in older version of NTP that
sends the requester a list of the last 600 hosts who have connected to
that server. For attackers the monlist query is a great reconnaissance
tool.
Comments