Kevin Beaumont on Nostr: If it helps anybody prepare for attacks like this, here's an example - init.lt is a ...
If it helps anybody prepare for attacks like this, here's an example - init.lt is a telco in country, here's the attacker config.
The infrastructure is on prem.
#NoName don't have much bandwidth as Ddosia is small, what they rely on is webapps failing over under stress.
Each campaign NoName run has a unique ID - when they find an easily downable target, they save the target campaign details and rerun it in the future over and over again on different days to make themselves appear busy.
Published at
2023-12-26 12:30:11Event JSON
{
"id": "c17235309fd962372db3e76a49fd41f46675785fb0bed0795a19933f658c23d4",
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747",
"created_at": 1703593811,
"kind": 1,
"tags": [
[
"e",
"de046d46036049c73385709a56f34757762e0a9c6846cd480c2ea7ecaabe21dc",
"wss://relay.mostr.pub",
"reply"
],
[
"t",
"noname"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/111646724042526490",
"activitypub"
]
],
"content": "If it helps anybody prepare for attacks like this, here's an example - init.lt is a telco in country, here's the attacker config. \n\nThe infrastructure is on prem. \n #NoName don't have much bandwidth as Ddosia is small, what they rely on is webapps failing over under stress.\n\nEach campaign NoName run has a unique ID - when they find an easily downable target, they save the target campaign details and rerun it in the future over and over again on different days to make themselves appear busy.\n\nhttps://cyberplace.social/system/media_attachments/files/111/646/702/580/664/957/original/177384cbb16ac93b.png\n\nhttps://cyberplace.social/system/media_attachments/files/111/646/706/398/654/280/original/80109614c41b400a.png\n\nhttps://cyberplace.social/system/media_attachments/files/111/646/708/575/718/603/original/e98d54882afbe8ca.png",
"sig": "a6889e7e864bdbec00aa306249d7195637af7d0469ad69e14be8c5a51a67b9b19abe5a04a6b3647fbb2a4e184d74898c1cc2ab13d5ab64528ea8b844e3c05bd0"
}