6 ms·
Cyberattack – November 2023
- dragontamer 3y agoI've got a theory that DDOS services need to "demonstrate" their abilities to the black market, to prove that they're legitimate. Blender is an ideal target: high profile, with enough technical expertise to post and publish the details of the DDOS. Its not that anyone "wanted" to hurt Blender per se. Its that the DDOS service / black hat group wants to publicly demonstrate themselves and advertise their services. At least, that's my running theory why otherwise "innocent" projects (like Blender) get attacked like this. Anyone have any other theories why Blender could be targeted?
- Turing_Machine 3y agoSeems like a reasonable theory to me. I haven't heard that Blender has made any real enemies. Neither is likely they'd be able to pay a lot of ransom (they're pretty well funded for a FOSS project, but not in the range that would make them the most attractive ransom target).
- fragmede 3y agoMy then-company's site was once threatened for the princely sum of one Bitcoin, back when they were $5,000. Blender has that much to pay in ransom, if they capitulated.
- Frivolous9421 3y agoNot a theory, you see this all the time, people used to packet pastebin.com a lot for some reason
- tambourine_man 3y agoI was exactly thinking “why would anyone want to hurt Blender?” as I read the article. Your theory makes a lot of sense.
- cozzyd 3y agoPerhaps the residents of Flatland are at it again.
- jachee 3y agoOne hole in that theory is that Blender didn’t explicitly mention what DDoS-mitigation service they’re using, so no particular service is getting any advertising/exposure benefit from the attack.
- dehugger 3y agoI think the parent means people offering DDoS-as-a-service, not DDoS mitigation services.
- GoblinSlayer 3y agoBlender did buy a DDoS mitigation services as a result.
- GoblinSlayer 3y agoIt's enough to demonstrate necessity.
- dragontamer 3y agoI'm not saying that DDOS mitigation companies did this. It is sufficient for a black market DDOS-as-a-service company to do this for marketing.
- jachee 3y agoAha! Sort of like Vader showing off the Death Star on Alderaan. I’m so white-hat that I didn’t consider that interpretation.
- dragontamer 3y ago> Sort of like Vader showing off the Death Star on Alderaan. Grand Moff Tarkin showing off the Death Star to Vader (and everyone else). But yes, I get your point, even if you misremembered the movie slightly :-). Episode 4 was very intriguing because Grand Moff Tarkin (and the Emperor) are the only two people in Episode4/5/6 that Vader listens to. I know that there's plenty of Disney spinoffs at this point, but more spinoffs that analyze Grand Moff Tarkin would be a good thing.
- hackideiomat 3y agoDDoS is also a good distraction from actual attacks tho
- tetris11 3y agoor a racket for cloud providers to drum up some demand
- scotty79 3y ago> The issue was resolved by moving behind a dedicated DDoS mitigation service, and the attack stopped at the end of the day. Step one, create DDoS mitigation service. Step two attack random high traffic sites with advertising and covert DDoS attacks. Profit?
- hrrsn 3y agoWouldn't be the first time: https://www.tripwire.com/state-of-security/mirai-iot-hijacking-botnet-sentenced https://www.tripwire.com/state-of-security/mirai-iot-hijacki... > Jha and White co-founded a company called ProTraf Solutions, which provided anti-DDoS services to Minecraft servers. Nothing wrong with that, of course. But in order to create new customers, the pair started targeting websites with DDoS attacks and then either tried to extort money to call off the attacks or offered services which they claimed could defend the sites.
- duckhelmet 3y ago[dead]
- oriettaxx 3y ago"attack"? or just heavy bots they were not prepared to handle? many experienced that heavy (IP changing) bot called something like "thesis test" this month...
- tgsovlerkhgsel 3y agoWhile technically correct, I wish everyone would stop calling DDoS attacks "cyberattack". When I saw the headline I envisioned a supply-chain attack and was half-expecting that I'd need to reinstall my machine and rotate all credentials. In 99% of cases, a DDoS is much less concerning than most other kinds of attacks.
- deleted 3y ago[deleted]
- vanderZwan 3y agoSo what is it then, if not a cyberattack?
- xandfor 3y agoCall it DDoS and not unspecific clickbaity
- tgsovlerkhgsel 3y agoExactly, this is what I'd like to see.
- potatopatch 3y agoIt is a script kiddie surplus, where the unit of measure is the asshat.
- rspoerri 3y agoIf you are prevented from working is it not a attack on you? Do you have to be robbed of your keys or your car as well?
- tgsovlerkhgsel 3y agoIt's technically correct, as I acknowledge. But would a headline saying "terrorists strike railway station" make you think of a bloodbath with dozens dead, or some ecoanarchists setting a trash can on fire and forcing an evacuation? Especially since the Blender website being down has very limited effects on users who already have the software, or are getting it from their operating system's distribution channel.