Sunday, August 10, 2008

Shadowserver: Georgian Government Websites Under Attack

Via The Shadowserver Foundation.

With the recent events in Georgia, we are now seeing new attacks against .ge sites. & are currently being hit with http floods. In this case, the C&C server involved is at IP address which is located in Turkey.

More here.

Note: For what it's worth, it is well-known in security circles that TTNet (Turk Telekom) has had some very serious problems with Russian/Ukrainian cyber criminals operating from within their network(s) for a couple of years now:

AS | IP | AS Name
9121 | | TTNET TTnet Autonomous System

Also, Brian Krebs points out that Jart Armin has also been blogging about this over on RBNExploit. -ferg


Post a Comment

<< Home