{"uuid": "64ac2e07-0bf6-4380-bc25-b2682f6458b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38153", "type": "seen", "source": "https://t.me/hacking_Attack/97957", "content": "Black Hat Ethical Hacking\nNew generation of botnets builds high-performance VPS-based DDoS attacks\n\nNew generation of botnets builds high-performance VPS-based DDoS attacksPost Views: 11 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VPS-based botnets: the new threat landscape for DDoS attacks in 2023Cloudflare, an internet security company, has reported that hyper-volumetric DDoS (distributed denial of service) attacks in Q1 2023 have shifted focus from compromised IoT devices to breached Virtual Private Servers (VPS). The new generation of botnets has gradually abandoned building large swarms of individually weak IoT devices and is now enslaving vulnerable and misconfigured VPS servers using leaked API credentials or known exploits. This shift allows threat actors to build high-performance botnets more easily and quickly, up to 5,000 times stronger than IoT-based botnets.\n\n\u201cCloud computing providers offer virtual private servers to allow startups and businesses to create performant applications. The downside is that it also allows attackers to create high-performance botnets that can be as much as 5,000x stronger,\u201d explains Cloudflare in their report. The company has been collaborating with cloud computing providers and partners to crack down on these emerging VPS-based threats and claims to have successfully taken down significant portions of these novel botnets.\n\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/DDoS/8/image14.png VPS servers used for DDoS attacks (Cloudflare)\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Ransom DDoS attacks increase by 60% YoY, with VPS-based botnets contributing to the riseCloudflare also reports steady DDoS activity in the first quarter of the year, with a 60% YoY increase in ransom DDoS attacks representing 16% of all recorded or reported DDoS attacks. These extortion-based DDoS attacks cause service outages to the target by bombarding them with garbage traffic and continue indefinitely until the victim meets the attacker\u2019s demands.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/DDoS/8/pasted-image-0.png Ransom DDoS attacks (Cloudflare)\n\nAlthough most attacks (86.6%) lasted for under 10 minutes, the number of larger attacks is still growing. Attacks surpassing 100 Gbps have recorded a rise of about 6.5% compared to the previous quarter.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/DDoS/8/pasted-image-0--14--1.png DDoS attack size trends (Cloudflare)\n\nCloudflare also recorded emerging trends in DDoS attacks during this quarter. There was a 1,565% QoQ increase in SPSS (statistical product and service solutions) based DDoS attacks fueled by the exploitation of two flaws (CVE-2021-22731 and CVE-2021-38153) in the Sentinel RMS License Manager service. Additionally, there was a 958% QoQ rise in DNS amplification DDoS attacks, where attackers exploit DNS infrastructure flaws to generate large amounts of traffic, and an 835% QoQ increase in GRE (generic routing encapsulation) based DDoS attacks, where attackers abuse the GRE protocol to flood the victim\u2019s network with garbage requests.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Offensive Security Tool: Mythic Effective defense strategies for the evolving threat of DDoS attacks in 2023Effective defense strategies require automated detection and mitigation solutions, as DDoS attacks in Q1 2023 show a trend of increasing in size and duration and are targeting a broad range of industries.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/DDoS/8/pasted-image-0--16-.png New DDoS attack tren[...]", "creation_timestamp": "2026-09-01T20:00:59.858534Z"}