YouTube and major US banks

Red Dwarf · **Joined:** Tue Jun 27, 2006 2:01 am **Posts:** 9227

In the last week of September 2012, Muslims outraged at the US film mocking the prophet Mohammed launched successive attacks on Youtube, NY Stock Exchange, and banks including Chase, PNC, Wells Fargo.

Each of the banks experienced problems for several hours, with customers unable to log on.

Threatpost, the consumer-oriented blog of Russian security firm Kaspersky Lab, said some of the traffic hitting the banks' servers reached 100 gigabits per second, as opposed to the regular DDoS attack volume of 5 to 10 gigabits per second.

The attacks were announced in advance, and tracked while in progress to show the success rate
http://hilf-ol-fozoul.blogspot.m/2012/0 ... nt_25.html

Quote:

After Successful attack to YouTube Servers in recent days made by Muslims around the world, many groups announce that they are ready to do similar attacks.
When supporter of that sacrilegious movie try to punish the cast and crew, the publisher included, this story will end until that time these kinds of Cyber Attacks will be continued and the Cyber world will be an unsafe place for all of Enemies of Islam.
As Cyber fighters of Izz ad-din Al qassam asked, in the first day of Dhu al-Qi'dah at 5 o’clock pm. Mecca time (14:00 GMT) Bank of America and New York Stock Exchange will be Attacked by Muslims worldwide.
Just like Attack to YouTube site you can Download the Links and run the web page and simply hit the Start at the time of Attack.

Quote:

We have received an Email from martyr Izz ad-Din al-Qassam Cyber Fighters Group that announces, following the supports of Islam prophet, this group is going to carry out cyber operations against credit and financial centers of insulting country, the United States, in the coming days.

The attack schedule was

Quote:

Tuesday 9/25/2012 : attack to Wells Fargo site, hXXp://www.wellsfargo.com
Wednesday 9/26/2012 : attack to U.S. Bank site, hXXp://www.usbank.com
Thursday 9/27/2012 : attack to PNC site, hXXp://www.pnc.com

NotBuyingIt · **Joined:** Sun Jun 13, 2010 5:22 pm **Posts:** 528

Oddly, several headlines that I read reported a primary attack upon Bank of America, NA, not mentioned in the blogspot article. "One of those sources said the claim by hackers that the attacks were prompted by the online video mocking the Prophet Muhammad is just a cover story." (NBC news)

On 28 September an inactive AOL email account of mine received six distinct spam emails that promoted a URL for YouTube that was claimed to link to the offending "Innocence of Muslims" movie trailer. The spam was transmitted via a Google group "sonia-sima", apparently originating from various Iranian IP addresses but with an unexpectedly long two-day delay in relaying them.

Red Dwarf · **Joined:** Tue Jun 27, 2006 2:01 am **Posts:** 9227

The outage due to the Bank of America attack can be seen in this host-tracker report

It is dated Tuesday September 18.

Red Dwarf · **Joined:** Tue Jun 27, 2006 2:01 am **Posts:** 9227

Below is a link to a recent conversation between the vigilante who calls himself "The Jester" and the people providing the DDOS for hire service, at a rate of $200 for 1,000 hours or $15 for 5 hours,
The conversation refers to multiboot.me as the supplier, operation Ababil, (“Operation Ababil” was also the name of a failed Pakistani military operation that occurred in April, 1984) and the so called Qassam DDOS attack on 6 US banks. Qassam also refers to a Palestinian Hamas organization known as Izz ad-Din al-Qassam Brigades.

The provider of the rent-a-DDOS facility in this conversation is agbimrwy at sharklasers.com using chat name mib_0ydffp captured in this display
http://1.bp.blogspot.com/-5Z8T7o1BmMc/UFiJxSSrBjI/AAAAAAAAAl4/Bdc97XlRvFg/s1600/29.JPG

Email addresses at sharklasers.com are provided as a disposable email service - "Guerrilla Mail - Disposable Temporary E-Mail Address"

The initial call was in a Pastebin posting on Sept 18.

Quote:

All the Muslim youths who are active in the Cyber world will attack to American and Zionist Web bases as much as needed such that they say that they are sorry about that insult.
We, Cyber fighters of Izz ad-din Al qassam will attack the Bank of America and New York Stock Exchange for the first step. These Targets are properties of American-Zionist Capitalists. This attack will be started today at 2 pm. GMT. This attack will continue till the Erasing of that nasty movie. Beware this attack can vary in type.

Fox News, Sept 19 wrote:

JPMorgan Chase ATM

J.P. Morgan Chase (JPM) and NYSE Euronext (NYX) experienced website trouble Wednesday after being targeted by apparent cyber attacks. The problems come a day after Bank of America experienced prolonged issues following a separate attack.

Red Dwarf · **Joined:** Tue Jun 27, 2006 2:01 am **Posts:** 9227

The root cause of these cyber-attacks on US financial institutions is the YouTube trailer, 14 minutes long, for a movie called "Innocence of Muslims".

The film has been banned in Russia as reported by PanArmenian Net.

PanArmenian.net wrote:

The short film, satirizing the prophet Mohammed, has also been banned by Pakistan, Afghanistan, Bangladesh, and Sudan. YouTube access in these countries has been blocked -until, according to official statements, the film is removed.

Such measures were deemed necessary after the movie sparked international outrage and led to mass violence around the world, raging for more than a week not only in Arab countries, but throughout Europe, Australia and Canada. Over the days of the protests, which turned violent at times, over 80 people were killed and hundreds were injured.

However, a quick check of accessibility to the YouTube clip from 44 different sample sites reveal that there are generally no restrictions from the Ukraine, Russia, Kazakhstan and Indonesia for example. There were no failures. So access to the Innocence of Muslims trailer is still widespread.

Code:

Received responses: 44 Ok    Average:    0.56 sec    210.87     

Atlanta, GA, US    Ok    117783    1.16 sec    99.57    74.125.137.91    Phil-Hosting.com
Lansing, MI, US    Ok    117628    2.21 sec    52.02    74.125.225.38    Hosttorch, Inc.
Kostanay, Kazakhstan    Ok    118235    0.67 sec    171.67    173.194.71.93    Globox
Dallas, TX, US    Ok    123942    0.29 sec    410.59    173.194.70.136    Provisov.Net
Orlando, FL, US    Ok    118057    2.25 sec    51.33    173.194.37.99    Apto Hosting
Moscow, Russia    Ok    132185    0.34 sec    376.60    74.125.232.71    JustHost
Haarlem, Netherlands    Ok    122847    1.39 sec    86.10    173.194.70.91    Steadyhost
Gunzenhausen, Germany    Ok    124166    0.41 sec    296.18    173.194.65.91    aBajt
Nurnberg, Germany    Ok    123065    0.39 sec    307.01    173.194.69.91    UpgradeHost.ru
London, UK    Ok    122856    0.29 sec    418.94    173.194.34.162    HostLinc
Los Angeles, CA, US    Ok    118042    0.30 sec    384.16    173.194.33.0    PremiumReseller
Amsterdam, Netherlands    Ok    123398    0.49 sec    248.38    173.194.34.41    PDhost
Amsterdam, Netherlands    Ok    117125    0.47 sec    242.31    173.194.34.227    Hostmaster, Ltd.
Nuremberg, Germany    Ok    123903    0.39 sec    309.37    173.194.69.190    VPS-server.ru
Kiev, Ukraine    Ok    132391    0.67 sec    193.02    173.194.39.137    Neohost
Moscow, Russia    Ok    132512    0.42 sec    307.22    173.194.32.166    Host-Food
Falkenstein, German    Ok    124657    0.39 sec    308.72    173.194.69.91    Hosting Hutor.com
Kiev, Ukraine    Ok    132035    0.38 sec    342.35    173.194.39.142    ABCname
Hampshire, UK    Ok    122528    0.30 sec    393.55    173.194.41.131    PremiumReseller
Los Angeles, CA, US    Ok    118383    0.17 sec    689.34    74.125.224.192    West Cost Hosting
London, UK    Ok    116888    0.21 sec    555.85    74.125.225.67    VirtualSplits
New York, NY, US    Ok    118574    0.56 sec    207.65    74.125.225.165    HostGW.com Webhosting
Seattle, WA, US    Ok    118028    0.39 sec    292.63    173.194.74.91    OH Web Hosting
Minsk, Belarus    Ok    117837    0.58 sec    197.10    173.194.32.46    BelInfoNet Ltd.
Birmingham, UK    Ok    123345    0.40 sec    299.29    173.194.34.161    Joomla Hosting
Dallas, TX, US    Ok    117286    0.22 sec    511.39    74.125.227.97    Custom Hosting Solutions
Dallas, TX, US    Ok    117265    0.20 sec    570.36    74.125.227.9    Eskhosting
Kiev, Ukraine    Ok    132254    2.24 sec    57.71    209.85.148.91    HOSTED
Kiev, Ukraine    Ok    131717    0.47 sec    270.84    173.194.39.134    ITQua
Montreal, Quebec, Ca    Ok    118330    0.38 sec    303.07    173.194.74.93    NordGate networks
Lansing, MI, US    Ok    118023    0.32 sec    354.67    74.125.227.7    Rioserver
Kiev, Ukraine    Ok    131417    0.49 sec    262.38    173.194.35.224    Hvosting
Bloomsburg, PA, US    Ok    119583    0.20 sec    570.77    74.125.224.134    indonetmedia
Gdansk, Poland    Ok    124042    0.42 sec    288.39    209.85.148.93    HCX Hosting
Toronto, ON, CA    Ok    118162    0.25 sec    458.18    74.125.226.67    OnyxNetUa
Bangkok, Thailand    Ok    132935    1.00 sec    130.22    113.21.241.30    Chaiyo Hosting
Kiev, Ukraine    Ok    132275    0.46 sec    281.25    173.194.70.93    VDS64.com
SPb, Russia    Ok    133157    0.36 sec    357.55    173.194.71.190    mrhost.biz
Kansas City, MO, US    Ok    116981    0.39 sec    289.90    74.125.225.201    Admo.net LLC
Jakarta, Indonesia    Ok    31694    0.60 sec    51.99    74.125.128.93    Nicosoft Media
Washington, USA    Ok    118146    0.15 sec    753.36    74.125.228.104    Nidohosting
Frankfurt, Germany    Ok    123906    0.29 sec    414.39    173.194.70.136    mrhost.biz
Kiev, Ukraine    Ok    131735    0.38 sec    341.02    173.194.39.137    HostService.ua
Paris, France    Ok    124376    0.33 sec    363.19    173.194.41.64    IntoHost

AlphaCentauri · **Joined:** Thu Mar 01, 2007 3:01 am **Posts:** 5915

You'd have to be wanting to be insulted to watch that film clip all the way through. The fact that someone dubbed in words the actors didn't say explains part of it, but the acting/directing is so bad that a middle school video club could do better.

It's interesting that 5-10 gig/s is considered typical and this one was 100 gig/s. The DDoS against Blue Security was estimated at 11 gig/s and it shut down the entire internet in Israel and lots of other websites. Now it would go unnoticed by all but those directly affected.

We've been saying for a long time that the trojan infections used to spread spam are also a significant threat to political/military/financial targets. I wish there weren't so many people who think spam isn't a problem as long as they have a spam filter on their own email account.

InBoxRevenge KS Forum

YouTube and major US banks

Who is online