Tracking DDoS - Botnets
Meris // Mikrotik-based Botnets
* size: 10.000 - 200.00
The Meris botnet first emerged in mid-2021 as a highly potent Distributed Denial of Service (DDoS)
threatintel
DDoS-Attacks on EU-Insitutions by russian activist, analyzed and summarized
TL;DR:
While attacks are ongoing and are problem for some institutions, most defenders could go with Geofencing, and we did not saw widespread coordinated
Fuzzing Smugglers / A dive into attacking WAFs
Utilizing a blend of header smuggling and header fuzzing, sophisticated HTTP attack techniques can effectively deliver DDoS payloads, either by evading detection by Web Application Firewalls (WAFs) or by targeting the WAF-encoders themselves
New Tactics from Booterservices
New TTP allows booterservice to mitigate GeoFencing
HTTP/2 attacks measured (Floods and RapidReset)
a comparison of HTTP/2 RapidReset vector-potential vs established vectors: IoT/HTTP/2 Multiplexing