Panda Software Reports on the Evolving Threat of Smurfing and Fraggling12 February 2006
Despite the evolution of information technologies and cybercrime, one type of attack remains a steady, unchanged threat: denial of service attacks. It is now eight years since the first appearance of two of the most popular types of denial of service attacks: smurfing and fraggling. Smurfing consists, in general terms, of a denial of service (DoS) attack against a computer by using a vulnerable network. It involves sending a message (broadcast) from the attacker's computer to all computers in the vulnerable network, simulating the victim and requesting a reply. In this way, the targeted computer is saturated by numerous messages from computers on the network. Fraggling is an enhanced version of smurfing, with the attacker simulating the victim, requesting more information from computers on the network so the victim is even more saturated than in the previous case. "These types of attacks compromise both the end victim as well as the intermediary network," explains Luis Corrons, director of PandaLabs. "Today, these kinds of attacks are somewhat outmoded, as they use techniques -- such as broadcasting messages to the whole network -- that a properly configured firewall will not allow. However, the essence of the attack still remains." Nowadays, the most common means for launching denial of service attacks are networks of zombies. These are groups of computers, commonly known as bots, that have been hijacked by malware. They can be controlled remotely by malicious users and perpetrate coordinated action, such as mass mailing or denial of service attacks, or even more silent and unidentifiable operations, such as targeted attacks. "The use of botnets is no more than an evolution of the networks of the zombies compromised in smurfing attacks," says Luis Corrons. "Of course, botnets are unfortunately more multipurpose by nature. In any event, the best solution to neutralize these attacks in corporate networks is clear: use of a perimeter firewall, able to filter the packets used in the attack before they reach workstations." About PandaLabs Since 1990, its mission has been to analyze new threats as rapidly as possible to keep our clients safe. Several teams, each specialized in a specific type of malware (viruses, worms, Trojans, spyware, phishing, spam, etc), work 24/7 to provide global coverage. To achieve this, they also have the support of TruPrevent(TM) Technologies, which act as a global early-warning system made up of strategically distributed sensors to neutralize new threats and send them to PandaLabs for in-depth analysis. According to AV-Test.org, PandaLabs is currently the fastest laboratory in the industry in providing complete updates to users (more info at http://www.pandasoftware.com/pandalabs.asp). To access the latest Panda Software press releases, please visit http://onlinepressroom.net/panda. For more information: Carolina Sanabria Public Relations Manager Panda Software, USA Tel: 818-543-6909 pr@pandasecurity.com
Source: prnewswire
All trademarks and copyrighted information contained herein are the property of their respective owners.
The Shield Pro 2006
Related Articles
- Voice Recognition Pocket PC Security Software
9 February 2006
- New Worm Attack Underscores Importance of Updating Security Software
5 February 2006
- Horizon Holding Corporation Acquires Silent Sword Software
3 February 2006
- Top Ten Cybercrime, Viruses and Spyware Most Frequently Detected by Panda ActiveScan in January
2 February 2006
- McAfee, Inc. Named Software Vendor of the Year by Softchoice
1 February 2006
- Imoviedownload to offer unlimited free movies, music, software and games
1 February 2006
- MadZ Software Releases P2P Doctor 2.0: An Adware, Spyware, and Malware Removal/Blocking Tool Specifically for Kazaa, Morpheus, iMesh, Bearshare, Limew
30 January 2006
- MadZ Software Releases P2P Doctor 2.0: An Adware, Spyware, and Malware Removal/Blocking Tool Specifically for Kazaa, Morpheus, iMesh, Bearshare, Limew
29 January 2006
- New Software Utility Makes Identity Theft Virtually Impossible
26 January 2006
- Panda Software Reports 'Classic' Viruses Dropped Dramatically in 2005
20 January 2006
|