ASERT's continued monitoring of #DDoS #hacktivism and geopolitical tensions uncovered a significant wave of attacks on #Romania staring in early June and continuing this week. These assaults are widespread, targeting various industries and involving numerous adversaries.
Investigation shows diverse attacking groups & targets. Threats include DDoS & ransomware targeting Romanian infrastructure (public.flourish.studio/visua…).
In the last 24 hours, Romania agreed to send Patriot missiles to Ukraine (apnews.com/article/romania-p…). Expect additional attacks on Romanian infrastructure by groups like NONAME057(16).
.@NETSCOUT released their 12th DDoS Threat Intelligence Report! 📈 Dive into the latest insights and trends as they dissect the strategies and methodologies used by adversaries against service providers, enterprises, and end-users. netscout.link/6005btoZX
Christopher Conrad retweeted
In recent years, political changes in leadership are often accompanied with attacks in cyberspace by opposition or those that reject the viewpoints of elected leaders. This is even more true today with groups like #Killnet, #AnonymousSudan, and #NoName057 in the mix as they typically target countries perceived to be anti-muslim or that show support and solidarity in standing with #Ukraine.
Dive into the world of NoName057(16), a prolific DDoS threat actor with geopolitical motives. Uncover their use of custom malware, DDoSia attack tool, and innovative gamified recruitment. @NETSCOUT @ASERTResearch bit.ly/3U7WqGL
These devices are scanning the global internet. Key target ports: 80, 443, 3389, 5060, 6881, 8000, 8080, 8081, 808s, 8888 + more. Goal is expanding botnets to enable DDoS attacks, phishing & more down the line.
Also new activity - scans increasing on ports 636, 993, 6002. Potential email server exploits next? What's the end game?