Dealing with DDoS threats by KillNet, Anonymous Sudan and REvil

It has recently been reported that KillNet, Anonymous Sudan and REvil have made some credible threats of large-scale attacks against US & European banking systems in response to the Wests support o...
Updated Jun 16, 2023
Version 2.0
F5 Distributed Cloud
f5 sirt
security
AaronJB's avatar
Ret. Employee
20+ years in IT as a software developer, network engineer, *nix admin, security engineer and scruffy-looking nerf herder. Current holder of SANS GCIH, GWAPT and GPEN certifications as well as F5-CS and CTS-ASM certifications.
View Profile
AaronJB's avatar
AaronJB
Ret. Employee
Jun 20, 2023

Since posting, I see that Microsoft have announced guidance based on their analysis of early June outages; Microsoft attribute those outages to actions by Storm-1359 while Anonymous Sudan claim responsibility (we could, therefore, posit that Storm-1359 is likely to be Anonymous Sudan & KillNet).

https://msrc.microsoft.com/blog/2023/06/microsoft-response-to-layer-7-distributed-denial-of-service-ddos-attacks/

Microsoft's advice aligns well with our own, above.

See also https://apnews.com/article/microsoft-outage-ddos-attack-hackers-outlook-onedrive-7a23f92ab3cc2b7f0c590c7d08cf03fe