For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Dealing with DDoS threats by KillNet, Anonymous Sudan and REvil

It has recently been reported that KillNet, Anonymous Sudan and REvil have made some credible threats of large-scale attacks against US & European banking systems in response to the Wests support o...
Updated Jun 16, 2023
Version 2.0
F5 Distributed Cloud
f5 sirt
security
AaronJB's avatar
Ret. Employee
20+ years in IT as a software developer, network engineer, *nix admin, security engineer and scruffy-looking nerf herder. Current holder of SANS GCIH, GWAPT and GPEN certifications as well as F5-CS and CTS-ASM certifications.
View Profile
AaronJB's avatar
AaronJB
Ret. Employee
Jun 20, 2023

Since posting, I see that Microsoft have announced guidance based on their analysis of early June outages; Microsoft attribute those outages to actions by Storm-1359 while Anonymous Sudan claim responsibility (we could, therefore, posit that Storm-1359 is likely to be Anonymous Sudan & KillNet).

https://msrc.microsoft.com/blog/2023/06/microsoft-response-to-layer-7-distributed-denial-of-service-ddos-attacks/

Microsoft's advice aligns well with our own, above.

See also https://apnews.com/article/microsoft-outage-ddos-attack-hackers-outlook-onedrive-7a23f92ab3cc2b7f0c590c7d08cf03fe