The attack, which was averted by the American security company Cloudflare, hit the ceiling on the scale of up to 10 used to define how serious an attack is, the CVSS scale. This means that the attacker could use it to remotely run code on accessed servers.
At most, the attack – a so-called multi-vector attack that takes place in several places and with several protocols at the same time – was up to 2 Tbit / s and around 15,000 bots must have been involved, writes the company on its blog. The bots ran a variant of the Mirai malware code targeted at exploited IoT devices and unpatched Gitlab instances.
As recently as two weeks ago, security company Rapid7 warned of a vulnerability in Gitlab, writes Techcrunch, and the ddo attack came a week ago.
According to Kaspersky the ddos attacks broke records during the third quarter of this year and only a month ago Microsoft was attacked against Azure which was measured at 2.4 Tbit / s.
– .
