Anonymous attacked WikiLeaks

Powered by SC Magazine
 

New exploit attack tool undergoes field tests, goes live in September.

Anonymous members have taken responsibility for launching a denial of service attack against Wikileaks this week using a custom-built tool that exploits a SQL server flaw.

Members were conducting field tests of the tool dubbed RefRef against several websites including WikiLeaks, Pastebin and was hitting 4Chan at the time of writing.

Users of a Twitter account linked to the RefRef attacks and an AnonOps blog described themselves as hacktivist with “a personal vendetta against WikiLeaks” adding that “we are sorry we took you down. We are even.”

Other Anonymous users had pledged support for Wikileaks and during this year and 2010 launched attacks against organisations which hindered or reviled the whistleblower organisation.

The RefRef tool was under development for months and was due for release mid September.

It exploited a known SQL injection vulnerability that overwhelmed a target’s resources by "using a target site's own processing power against itself" according to an AnonOps blog.

The tool would become useless against websites that had patched the vulnerability.

“So far, what they have is something that is platform neutral, leveraging JavaScript and vulnerabilities within SQL to create a devastating impact on the targeted website,” the AnonOps blog said.

“Previously, Low Orbit Ion Canon (LOIC) was the go to weapon for Anonymous supporters during protests against dictators in North Africa, and Operation: Payback. However, LOIC is also the reason scores of people have been arrested in the last year, so many feel its time is at an end.

“An attack vector that has existed for some time, resource exhaustion is often skipped over by attackers who favour the brute force of a (Distributed Denial of Service) attack sourced from bots or tools such as LOIC”.

Pastebin administrators in a tweet asked Anonymous to not “test your software on us again”.

 

More to follow.

Copyright © SC Magazine, Australia


Anonymous attacked WikiLeaks
Tags
 
 
 
Top Stories
ATO shaves $4m off IT contractor panel
Reform cuts admin burden, introduces KPIs.
 
Turnbull introduces data retention legislation
Still no definition of metadata to be stored.
 
Crime Commission prepares core systems overhaul
Will replace 30 year-old national criminal database.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
In which area is your IT shop hiring the most staff?




   |   View results
IT security and risk
  27%
 
Sourcing and strategy
  12%
 
IT infrastructure (servers, storage, networking)
  21%
 
End user computing (desktops, mobiles, apps)
  14%
 
Software development
  25%
TOTAL VOTES: 433

Vote
Would your InfoSec team be prepared to share threat data with the Australian Government?

   |   View results
Yes
  54%
 
No
  46%
TOTAL VOTES: 208

Vote