NEWS & EVENTS

Prolexic Stops Largest-Ever DNS Reflection DDoS Attack

May 30, 2013

167 Gbps Attack Targeted Real-Time Financial Exchange Platform

HOLLYWOOD, FL – (May 30, 2013) – Prolexic, the global leader in Distributed Denial of Service (DDoS) protection services, announced today that it has successfully mitigated the largest DNS reflection attack ever recorded, which peaked at 167 Gigabits per second (Gbps). The attack, the largest single DDoS attack Prolexic has mitigated in its 10-year history, was directed against a real-time financial exchange platform on May 27, 2013.

“This was a massive attack that made up in brute force what it lacked in sophistication,” said Scott Hammack, chief executive officer at Prolexic. “Because of the proactive DDoS defense strategies Prolexic had put in place with this client, no malicious traffic reached its website and downtime was avoided. In fact, the company wasn’t aware it was under attack.”

The DDoS mitigation for this attack was distributed across Prolexic’s four cloud-based scrubbing centers in Hong Kong, London, San Jose and Ashburn, Va. Prolexic’s London-based scrubbing center mitigated the majority of the malicious traffic, which peaked at 90 Gbps.

The DNS Reflection Denial of Service (DrDoS) technique exploits security weaknesses in the Domain Name System (DNS) Internet protocol.

In this type of DNS reflection attack, an attacker makes many spoofed queries to many public DNS servers. The source IP address is forged to appear as the target of the attack. When a DNS server receives the forged request it replies, but the reply is directed to the forged source address. This is the reflection component. The target of the attack receives replies from all the DNS servers that are used. This type of attack makes it very difficult to identify the malicious sources. If the queries (which are small packets) generate larger responses, then the attack is said to have an amplifying characteristic.

Prolexic’s digital forensics confirmed that 92 percent of the machines participating in the attack were open DNS resolvers, sourcing from port 53, which represented a malformed DNS response.

In March, Prolexic authored a white paper on DNS reflection attacks highlighting their increasing usage and illustrating how the DNS protocol can be exploited by cyber attackers. The white paper can be downloaded free of charge at www.prolexic.com/drdos. In addition, Prolexic’s Q1 Global DDoS Attack Report featured an in-depth case study on the technique.

“It’s only a matter of time, possibly by the end of this quarter, before the 200 Gbps marker is crossed,” said Hammack. “To keep pace with increasing attack sizes, Prolexic is continuing to build out its 800 Gbps DDoS mitigation infrastructure and by the end of the year, we will have approximately 1.2 Tbps of bandwidth on tap.”

Regardless of attack size, Prolexic recommends that all organizations proactively validate their DDoS mitigation service to minimize downtime. Best practices and guidance can be found in Prolexic’s latest white paper, “Planning for and Validating a DDoS Defense Strategy,” which can be downloaded for a limited time from www.prolexic.com/planning

About Prolexic

Prolexic is the world’s largest, most trusted Distributed Denial of Service (DDoS) mitigation provider. Able to absorb the largest and most complex attacks ever launched, Prolexic restores mission-critical Internet-facing infrastructures for global enterprises and government agencies within minutes. Ten of the world’s largest banks and the leading companies in e-Commerce, SaaS, payment processing, travel/hospitality, gaming and other at-risk industries rely on Prolexic to protect their businesses. Founded in 2003 as the world’s first in-the-cloud DDoS mitigation platform, Prolexic is headquartered in Hollywood, Florida and has scrubbing centers located in the Americas, Europe and Asia. To learn more about how Prolexic can stop DDoS attacks and protect your business, please visit www.prolexic.com, follow us on LinkedIn, Facebook, Google+, YouTube, and @Prolexic on Twitter.

###

Contact:

Michael E. Donner
SVP, Chief Marketing Officer
Prolexic
media@prolexic.com
+1 (954) 620 6017

Customer Spotlight
  • Alliant Credit Union

    Prolexic DDoS protection keeps more than 50,000 daily users online

    DOWNLOAD CASE STUDY >>
  • Fragrance and Beauty Products Retailer

    A DDoS attack takes down this popular site for 24 hours. Prolexic restores in 5 minutes.

    DOWNLOAD CASE STUDY >>
  • Leading Online Jewelry Retailer

    A DDoS attack took down the site of a premier jewelry retailer for nearly three days.

    DOWNLOAD CASE STUDY >>
  • Online Options Trading

    Financial services firm avoids extortion attempt. Prolexic keeps web site up during vicious Layer 7 attack.

    DOWNLOAD CASE STUDY >>
  • e-Commerce Startup

    When others couldn't mitigate the latest DDoS attack, a "daily deal" web site called Prolexic: problem solved in 2 hours.

    DOWNLOAD CASE STUDY >>
  • A Leading Content Rating Organization

    A 9 million packets per second DDoS attack brings down web site before Prolexic steps in.

    DOWNLOAD CASE STUDY >>
  • Spa and Wellness Firm

    Prolexic quickly stops a combination Layer 4 and 7 DDoS attack after a host's mitigation capabilities falls short.

    DOWNLOAD CASE STUDY >>
  • Foundation Management

    Prolexic mitigates GET flood in minutes for new client after Sunday night emergency call.

    DOWNLOAD CASE STUDY >>
  • Web site building and hosting services firm

    Prolexic mitigates Layer 4 UDP flood peaking at 6.2 Gbps. Protects 6 million Yolasites.

    DOWNLOAD CASE STUDY >>
  • Online Movie Subscription Service

    After seeing all traffic route to Prolexic, hackers pull the plug on DDoS attack.

    DOWNLOAD CASE STUDY >>
  • IPG Holdings Limited

    Prolexic mitigates Layer 7 GET floods targeting payment processing platform.

    DOWNLOAD CASE STUDY >>
  • VirtualRoad.org

    Prolexic mitigates politically motivated attacks against web hosting company's clients.

    DOWNLOAD CASE STUDY >>
  • Financial Services Firm Global eSolutions

    Prolexic mitigates Layer 3, 4 and 7 attacks against Forex trading platform.

    DOWNLOAD CASE STUDY >>
  • Krebs on Security

    Prolexic fends off Pandora DNS amplification attacks for popular cyber security blog.

    DOWNLOAD CASE STUDY >>
  • e-Commerce Provider of Printed Promotion Items

    Prolexic mitigates two-week Layer 7 DDoS attack campaign.

    DOWNLOAD CASE STUDY >>
  • Global Blogging Site

    Prolexic protects freedom of speech for 30 million users targeted by six-month political DDoS campaign.

    DOWNLOAD CASE STUDY >>
  • Online Credit Card Site

    Prolexic mitigates Layer 4 DDoS attacks against Ixaris site, EntroPay.com.

    DOWNLOAD CASE STUDY >>
  • e-Commerce Web Site

    Prolexic mitigates 25-40 Gbps Layer 3 DDoS attacks against online auto parts retailer.

    DOWNLOAD CASE STUDY >>
  • Timepieces e-Commerce Site

    Prolexic keeps World of Watches ticking after DDoS attack flood site.

    DOWNLOAD CASE STUDY >>
  • PayPro Global

    Prolexic mitigates 16-hour Layer 7 DDoS attack on software distribution site.

    DOWNLOAD CASE STUDY >>
  • Henyep Capital Markets

    Prolexic keeps Henyep accessible and trading through multiple SYN, GET and ICMP flood attacks.

    DOWNLOAD CASE STUDY >>
  • Australia’s #1 Job Search Website

    Prolexic keeps Seek.com.au online and incident-free for millions of job seekers.

    DOWNLOAD CASE STUDY >>
  • e-Commerce Hosting Provider for Top Tier Sites

    Prolexic keeps Americaneagle.com and its customers generating revenue

    DOWNLOAD CASE STUDY >>
  • Customer ROI requires online accessibility and reliability

    Prolexic ensures Clickpoint! Media's online services are available and incident-free

    DOWNLOAD CASE STUDY >>
  • University Federal Credit Union

    Prolexic's mitigation services now protect credit union with US$1.6 Billion in assets

    DOWNLOAD CASE STUDY >>
  • 1ink.com

    Prolexic mitigates 70 Gbps SYN flood DDoS attack for popular ink retailer

    DOWNLOAD CASE STUDY >>
  • Arab National Bank

    Builds strong DDoS defense to serve online banking customers and e-trade site

    DOWNLOAD CASE STUDY >>
  • OnCourse Systems for Education

    Prolexic succeeded where two other mitigation firms failed

    DOWNLOAD CASE STUDY >>
Announcements
  • Can You Afford a Web Application Layer Attack?

    Why protecting your customers’ personal information is good business

    LEARN MORE >>
  • Threats and Mitigations: A Guide to Multi-Layered Web Security

    Protecting your web assets in a new age of cybersecurity threats

    LEARN MORE >>
  • Q2 2014 Global DDoS Attack Report

    Malicious actors switch tactics to build, deploy and conceal powerful botnets

    LEARN MORE >>
  • Akamai at Black Hat USA 2014

    Visit Akamai at Booth 858 at Black Hat USA 2014, August 6-7

    LEARN MORE >>
  • Akamai Edge 2014 in Miami: October 8-10

    The premier event for Internet innovators, tech professionals and online business pioneers.

    LEARN MORE >>