[ insider_reports_insider ]
U.S. And S. Korea Attacks: "Source Located In United Kingdom"
Doug Caverly
Staff Writer
2009-07-14
 Insider Reports RSS Feed
When the U.S. and South Korea became victims of cyber attacks last week, logic and not a little evidence pointed to North Korea as the culprit. However, a new report traces the attacks to the U.K., instead.
 | | U.S. And S. Korea Attacks: Source Located In U.K. |  |
Bkis, a Vietnam-based security company, stated on its corporate blog, "In order to locate the source of the attacks, we have fought against C&C servers and have gained control of 2 in 8 of them. After analyzing the logs of these 2 servers, we discovered the IP address of the master server, which is 195.90.118.xxx. This IP is located in UK."
Bkis then sprung another surprise by painting the attacks as being far more powerful than experts first thought.
The blog post continued, "During the past few days, the number of zombies has been estimated to be 50,000 by Symantec and about 20,000 by Government of South Korea. But, by taking control of two C&C servers and analyzing logs on these servers, we count the exact number of zombies that have been querying C&C servers to receive commands. . . . [T]here have been 166,908 zombies from 74 countries around the world that have been used for the attacks."
This certainly puts an interesting spin on the situation. Next, it should be exciting to see if the attacks can be connected to a person in the U.K., or if the trail leads to yet another country.
About the Author:
Doug is a staff writer for SecurityProNews, InternetFinancialNews, SearchNewz, and WebProNews.
More insider_reports_insider Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
