Books

Malicious actors using the Zeus Crimeware gain control over and access to information on infected host computers, including smartphones and tablets. For example, the attacker can request a screenshot of all displayed content on a host device, which could reveal sensitive information. In addition, the attacker can force the host to download and run remote and local files, or inject code to change the display of a webpage displayed by the host’s browser. Find out more about this DDoS threat

http://bit.ly/YWe7dy | Many older SNMP devices have the ability to take public queries from the Internet enabled by default, allowing malicious actors to launch reflected DDoS attacks by directing SNMP messages at a chosen target. To stop these devices from participating in attacks, network administrators need to manually check for the presence of this protocol and turn off public access. Find out more about this DDoS threat in the full Prolexic SNMP Threat Advisory, available at

http://www.prolexic.com/knowledge-center-ddos-threat-advisory-storm-network-stress-tester-crimeware-doc-audio.html | The Storm Network Stress Tester DDoS crimeware toolkit targets Windows XP (or higher) operating systems, infecting computers with malicious software that turns them into attacker-controlled, obedient zombies. Once infected, malicious actors can manipulate the computers they control remotely, allowing an almost unlimited variety of abuse. Find out more about this DDoS threat

http://www.prolexic.com/knowledge-center-ddos-attack-report-2014-q1.html?cvosrc=3rdParty.NationalPositions.PRS-ARQ14-casestudy | In Q1 2014, Prolexic successfully mitigated its largest DDoS attack campaign against a Prolexic customer, peaking at more than 200 Gbps and 53.5 Mpps. Learn what up-and-coming strategies were used by the attackers in this short presentation. Full details on this attack and other DDoS trends are provided in the Prolexic Q1 2014 DDoS attack report, available for a

http://www.prolexic.com/knowledge-center-ddos-threat-advisory-dns-flooder-audio.html | By exploiting vulnerable DNS servers – or setting up their own – malicious actors can launch powerful DDoS reflection attacks using the new DNS Flooder cybercrime toolkit. The toolkit exploits nuances of the DNS protocol to amplify attacks by a factor of 50 or more, while making the attacker almost entirely anonymous. Find out more about this DDoS threat in the full Prolexic DNS Flooder Threat Advisory,

http://www.prolexic.com/knowledge-center-ddos-attack-report-Q1-2014-attack-spotlight-audio.html | In Q1 2014, DDoS attackers chose a new and powerful DDoS technology to launch their attacks – enabling the largest attack ever to cross the Prolexic (now part of Akamai) mitigation network. Find out more about the most popular industry targets, techniques, trends and other cyber-threat statistics in the full Prolexic Q1 2014 DDoS attack report, available for a free download at:

http://www.prolexic.com/knowledge-center-dos-and-ddos-attack-reports.html | Cyber attackers are choosing reflection, not infection, to launch high-bandwidth attacks. For more information listen to this audio from Prolexic

http://www.prolexic.com/why-prolexic-protected-by-prolexic-ddos-protection.html | This audio goes into depth about how DDoS attackers have been able to use the pingback function in the WordPress publishing platform to take over an attack target with millions of connection requests.

http://www.prolexic.com/industries-dos-and-ddos-protection-media-entertainment-gaming.html | This audio gives details on DDoS attacks -- specifically in Q1 2014, where Media and Entertainment took the most impact of DDoS attacks.

http://www.prolexic.com/knowledge-center-white-paper-ddos-cyber-attacks-global-markets.html | The economic infrastructure provided by financial firms, including trading platforms, is essential to national economies. So that leads to the question: Are DDoS cyber attackers trying to manipulate stock prices and trading markets? The experts in PLXsert think so. Find out more about this threat to the financial industry in this short audio podcast from Prolexic.

http://www.prolexic.com/ | Prolexic now apart of Akamai threat advisory about NTP amplification DDoS attacks includes an analysis of how it generates a monlist payload, along with DDoS protection and mitigation techniques, and a review of two DDoS attack campaigns using NTP amplification techniques.

http://www.prolexic.com | choosing a DDoS protection provider is a critical business decision. Getting it wrong can have a devastating impact on a company’s bottom line and global reputation. These are the 10 factors to consider when choosing . depth of experience, dedicated mitigation capacity, and human expertise on the front lines of the fight against DDoS. All 10 are explained more thoroughly in the white paper.

http://www.prolexic.com/knowledge-center-ddos-attack-report-2013-q4/twitter.html?cvosrc=3rd%20Party.National%20Positions.AR-13-Q4 | Q4 2013 set new records for the frequency and size of DDoS attacks, with one notable attack peaking at 179 Gbps. This would be a crippling DDoS attack for most organizations. Q4 also saw significant growth in the misuse of the CHARGEN and NTP protocols in distributed reflection DDoS attacks, while mobile devices started to play a significant role in an attack

Practice Podcast 1

http://www.prolexic.com | Recent years have marked a significant rise in distributed denial of service (DDoS) activity from Asia with targets within the region and around the world. Prolexic has observed malicious actors compromising Chinese and other Asian IT resources and using them as command and control (CnC) and zombies in DDoS botnets. In fact, in Q4 2013, six the top ten source countries for DDoS activity were in Asia. Learn more about the Asian DDoS threat in this podcast. (2:37)}

http://www.prolexic.comMulti-vector DDoS attack campaigns make DDoS mitigation more difficult. Multiple attack vectors make it less likely the attack can be blocked with automated devices. In addition, the DDoS mitigation team has to track more details and to fight the attack on multiple fronts simultaneously. In this podcast, Prolexic examines a Q4 2013 DDoS attack that involved a dozen attack vectors, and explains how they fought back. (2:37)

http://www.prolexic.com/services-dos-and-ddos-mitigation.html | DDoS mitigation appliances alone are not enough to stop today’s large, brute force DDoS attacks. Attackers can overwhelm and sidestep static devices in several ways. In Prolexic’s experience, most tools available today to fight against DDoS attacks are missing the most important part of the solution – the experience of an expert security engineer. In this short podcast, Prolexic explains why you need human security expertise in