---
Email this article   Print article 

Hacker Grinches Launch DDoS Attack Against Amazon, Others

By Andrew R Hickey, CRN
December 24, 2009    10:35 AM ET

A distributed denial-of-service (DDoS) attack launched against the domain name service (DNS) providers for Amazon, Wal-Mart and Expedia Wednesday thwarted last-minute holiday shoppers in Northern California looking to beat the clock, as those sites experienced outages.

According to several reports, the retailers' sites were taken offline, forcing late-to-the-game gifters to take their holiday spending cash elsewhere for roughly an hour.

Neustar, the company that provides the DNS services under its UltraDNS brand name told PC World that the problem was discovered and righted in less than an hour.

"At 7:45 p.m. Eastern Time we noticed an abnormal spike in queries and immediately identified it as a DDoS attack," Allen Goldberg, Neustar's vice president of corporate communications, told PC World, adding that Neustar analyzed the attack pattern and was able to limit its effects within minutes of identifying the problem. "We had everything under control in well under an hour. The attack was limited to Northern California users."

Some smaller retailers that use Amazon Web Services for Web site hosting were also taken down by the attack, as the DDoS attack affected Amazon's S3 and EC2 cloud services for a brief period.

As of Thursday morning, the exact cause and motivation of the DDoS attack was unclear.

Wednesday's attack is similar to a DDoS attack against UltraDNS earlier this year. That attack took out Amazon, Salesforce.com and other sites. Neustar has said that Wednesday's attack was smaller in reach than the previous attack and that it affected fewer customers.

To continue reading this article, please download the CRN Tablet Edition app from the iPad App store.

SHARE THIS ARTICLE

More Security

Recent Articles

Bit9 Security Survey: Nobody Wants To Be A Headline

What's keeping IT security professionals awake at night? These survey results provide insight into perceived threats and vulnerabilities, the effectiveness of security practices, and opinions about disclosure practices.

Nix That Click: Six Scareware Scams To Watch Out For

SpywareRemove.com provides a list of some of the nastiest rogue antispyware programs out there -- designed to trick people into paying to remove malware from their computers.

Malicious Malware: Six Ways Cybercriminals Beat Security

Cybercriminals have become adept at going around the latest security defenses. Here's a list of some of the most innovative malware in use today.

  More Slide Shows




Related Videos
Loading...