TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

F5 Labs

Exploited Memcached Servers Lead to Record-Setting 1.3Tbps DDoS Attack

2018-03-02 · Read original ↗

ATT&CK techniques detected

3 predictions
T1498Network Denial of Service
87%
"exploited memcached servers lead to record - setting 1. 3tbps ddos attack the security community was just taking a breather because we hadn ’ t seen a massive ddos attack since the mirai thingbot took down dyn in october 2016 with a 1. 2 terabit per second ddos attack. yesterday,…"
T1498.001Direct Network Flood
70%
"exploited memcached servers lead to record - setting 1. 3tbps ddos attack the security community was just taking a breather because we hadn ’ t seen a massive ddos attack since the mirai thingbot took down dyn in october 2016 with a 1. 2 terabit per second ddos attack. yesterday,…"
T1499Endpoint Denial of Service
46%
"exploited memcached servers lead to record - setting 1. 3tbps ddos attack the security community was just taking a breather because we hadn ’ t seen a massive ddos attack since the mirai thingbot took down dyn in october 2016 with a 1. 2 terabit per second ddos attack. yesterday,…"

Summary

Memcached is just one of many application infrastructure systems that could launch the same types of attacks if they were also misconfigured.