DATE:
2008-08
AFFECTED COUNTRIES:
Georgia
AFFECTED SITES:
Multiple governmental sites
EFFECT OF ATTACKS:
Many blocked, others defaced/hijacked. The Georgian Parliament website was defaced with images comparing the president to Hitler.
SOURCE COUNTRY:
Russia
ALLEGED ATTACKERS:
Russia's Foreign Military Intelligence agency (the GRU) and Federal Security Service (the FSB) (5).
TYPE OF ATTACK:
Traffic re-routing, DDoS
ATTACK SPECIFICS:
n/a
EVENT DESCRIPTION:
Traffic rerouted through servers in Russia and Turkey, rumored to be under control by the Russian Business Network - a government-influenced hacker group. Incidents took place days into the 2008 South Ossetia war. At least one defacement had the "South Ossetia Hack Crew" taking credit for the attack. Arbor Networks found data in the DDoS attacks with the message "win+love+in+russia". DDoS might have started weeks before the ground attacks - as early as late July. Some sites switched to Blogger, while others were offered hosting by previous Russian cyberwarfare target, Estonia. Stopgeorgia.ru may have been a "fulcrum" for the attacks.
URLS:
1. http://mis-asia.com/news/articles/cyber-attacks-knock-out-georgias-internet-presence
2. http://www.smh.com.au/news/technology/georgian-websites-forced-offline-in-cyber-war/2008/08/12/1218306848654.html
3. http://www.nytimes.com/2008/08/13/technology/13cyber.html?_r=1&em
4. http://www.wired.com/dangerroom/2008/08/civilge-the-geo/
5. http://www.theregister.co.uk/2009/03/23/georgia_russia_cyberwar_analysis/
No comments:
Post a Comment