Monday 27 April 2015

Google detect new DDoS attacks based on JavaScript

SOURCE: Noticias de seguridad informática http://noticiasseguridad.com/importantes/google-detect-new-ddos-attacks-based-on-javascript/
TAGS: DDoS attacks, Google, JavaScript

Google analyzes every day millions of websites and content so that users can enjoy the safest possible experience when connecting to the Internet. Thanks to the database security Google users can always know if a website is legitimate or may contain malicious downloads or supplements that may compromise the safety of users.


In mid-March security researchers detected a series of DDoS attacks worldwide against censorship on the net . Since then it has been investigating this blow against these sites to identify the source thereof and the method used, may well discover a new way to attack virtually invisible.


Hackers have been using benign web pages to inject JavaScript code with which to attack the web. To this have been used multiple pages of considerable prestige as " baidu.com "(Chinese search engine like Google) that the user attempting to access a particular page, it is automatically launched against multiple requests, even to lock the server the same.


javascript google injections ddos


This type of attack has been in use since last March, but the latest attack has been detected so far on 7 April. The scripts were injected varied in size between 995 bytes and 1325 bytes .


The web traffic using TLS encryption are not vulnerable to this attack technique. AlsoDDoS attacks are very difficult to identify and counteract by system administrators often still need to hire external services to address them.


Therefore the webmasters should adopt secure connection protocol as soon as possible and to avoid becoming victims of these DDoS attacks and, incidentally, continue positioning well in search engines like Google where security is rewarded.


Fuente:http://www.redeszone.net/



Google detect new DDoS attacks based on JavaScript
Noticias de seguridad informática

No comments:

Post a Comment