Interesting People mailing list archives

[BGP!] Suspicious event hijacks Amazon traffic for 2 hours, steals cryptocurrency


From: "Dave Farber" <farber () gmail com>
Date: Tue, 24 Apr 2018 15:49:09 -0400




Begin forwarded message:

From: Lauren Weinstein <lauren () vortex com>
Date: April 24, 2018 at 3:19:18 PM EDT
To: nnsquad () nnsquad org
Subject: [ NNSquad ] [BGP!] Suspicious event hijacks Amazon traffic for 2 hours, steals cryptocurrency


[BGP!] Suspicious event hijacks Amazon traffic for 2 hours, steals cryptocurrency

https://arstechnica.com/information-technology/2018/04/suspicious-event-hijacks-amazon-traffic-for-2-hours-steals-cryptocurrency/

     Amazon lost control of some of its widely used cloud services
   for two hours on Tuesday morning when hackers exploited a
   known Internet-protocol weakness that allowed them to redirect
   traffic to rogue destinations. The attackers appeared to use
   one server masquerading as cryptocurrency website
   MyEtherWallet.com to steal digital coins from unwitting end
   users. They may have targeted other customers of Amazon's
   Route 53 service as well.  The incident, which started around
   6am California time, hijacked roughly 1,300 IP addresses,
   Oracle-owned Internet Intelligence said on Twitter.  The
   malicious redirection was caused by fraudulent routes that
   were announced by Columbus, Ohio-based eNet, a large Internet
   service provider that is referred to as autonomous system
   10297. Once in place, the eNet announcement caused some of its
   peers to send traffic over the same unauthorized routes.
   Amazon and eNet officials didn't immediately respond to a
   request to comment.

- - -

--



-------------------------------------------
Archives: https://www.listbox.com/member/archive/247/=now
Modify Your Subscription: https://www.listbox.com/member/?member_id=18849915
Unsubscribe Now: 
https://www.listbox.com/unsubscribe/?member_id=18849915&id_secret=18849915-a538de84&post_id=20180424154916:904E1942-47F8-11E8-8F77-D4A0F667582D
Powered by Listbox: http://www.listbox.com

Current thread: