While the researchers indicated they were making it available to aid in the efforts to develop effective tools to prevent attacks, the cold, hard reality is that the same tool and code can be used for attacks by those out operating botnets for malicious purposes. Today, probably yes… but last week the first steps toward bringing about the reality appeared in the VOIPSEC mailing list when a group of academic researchers announced the availability of a “VoIP bot” for testing automated attacks against VoIP systems that use the SIP protocol. Is this just a piece of creative fiction? (or a nightmare?) (And YYY’s lawyers desperately search for some way to pin this on ZZZ.)
ZOMBIE PANIC SOURCE BOTS FULL
Thursday morning YYY is back in full operation, but it’s too late to overtake ZZZ’s head start. YYY can now make calls, but in their desperate attempts to restore connectivity the YYY IT staff has made such a mess of their network that it takes them until extremely late in the evening to return full service. All bots immediately cease their attacks. Late on Wednesday at a designated time, the bot-herder enters the IRC room again and enters another command. Meanwhile, hidden out on the net, the bot-herder watches the attempts and simply brings more botnets online as some nodes are successfully shut down or blocked. Those providers, of course, are preoccupied trying to fight off the attack themselves. Because the attacks paralyzed YYY’s SIP server but left their Internet connection still usable, their ISP won’t help and says it is a problem for their telephony providers.
ZOMBIE PANIC SOURCE BOTS HOW TO
YYY IT staff try desperately to stop the attack but don’t have any real knowledge of how to defend against these attacks. Effectively all outbound (and inbound) PSTN connections grind to a halt.
Moments after the Enter key is pressed, “bots” on tens of thousands of zombie PCs wake up and start slamming the SIP servers at YYY and its providers with enormous numbers of bogus SIP messages, each of which require processing. But at a designated time on Tuesday, a bot-herder somewhere out on the Internet connects to an IRC chat room and enters a line of text. The test begins on Monday and both firms are off in their own buildings rapidly calling. A large sum of money is exchanged through third-parties. But the staffer also discovers that YYY is using very cheap voice service providers who run over the public Internet with no security.ĭiscreet inquiries are made in the dark corners of the Internet. A ZZZ staffer discovers that part of why YYY has consistently underbid them is because they are using SIP trunks to reduce their PSTN connection costs. If they fail to win the contract, they will have to shut down-they need to do “whatever it takes” to win over YYY. The ZZZ CEO has said to his staff that it is “do or die” for the company. Customer X has decided to run a test pitting the two companies against each other for a week to see who can generate the most leads. A story: ZZZ Telemarketing (not a real name) is locked in a heated fight with their bitter rival, YYY Telemarketing (also not a real name), to win a very large lead generation contract with Customer X.
0 kommentar(er)
