DDoS Attack Definitions - DDoSPedia

DDoSPedia is a glossary that focuses on network and application security terms with many distributed denial-of-service (DDoS)-related definitions. It provides a central place for hard to find web-scattered definitions on this topic.
Search

TDL-4 (Alureon)
TDL-4 is the fourth-generation version of the well-known TDSS a.k.a. Alureon Trojan, responsible for infecting a vast number of PCs around the world. The TDL- is one of the most active and resilient botnets currently conducting operations around the world. In the first three months of 2011, over 4.5 million computers were infected with TDL-4, with 28% of these computers being located in the United States.
When installed, TDL-4 creates a rogue file system at the end of the infected computer’s disk, which it heavily encrypts and stores its files on. Additionally, it is able to bypass the low-level driver signing requirement of 64-bit editions of Windows by installing itself in the master boot record (MBR) of the system drive, subverting the normal booting process in order to run its own unsigned malicious code. Once TDL-4 is installed on a machine and present in the MBR, it not only disables Windows Update and various antivirus products, but it removes or disables many other known types of similar malware such as Zeus or Optima to reduce competition as well as ensure that there are no undesirable interactions with such malware. Malware that exhibits such stealth behavior and low level interaction is called a “rootkit” (and a kernel-mode variant such as TDL-4 is called a “bootkit”).
Perhaps the most interesting feature of TDL-4 is the complex P2P network that its botnet uses for inter-bot and command and control (C&C) server communication. TDL-4 bots are able to communicate with each other and with C&C servers (of which around 60 have been discovered) using the public P2P Kad file sharing network and heavy encryption. Generally speaking, dismantling a botnet often involves the disabling of C&C servers as seen in the past during the dismantling of the Mariposa and other large botnets. As the TDL-4 botnet has both C&C servers as well as inter-bot communication abilities across a public P2P network (and incredibly advanced stealth techniques including custom encryption), many are calling it the “indestructible botnet”.
DDoSPedia Index

#

#OpIsrael

#RefRef

A

ADB Miner

Admin.HLP

Amplification Attack

Anonymous

Apache Killer

Application Misuse Attack

ARP Poisoning

Asymmetric Attack

B

Backdoor

Booster Script

Border Gateway Protocol (BGP) Attack

Botmaster

Botnet

Boy-in-the-Browser Attack

BrickerBot

Buffer Overflow Attack

ByteDoS

C

CERT

Clean Pipe

Clearnet

Clickjacking

Command and Control Server

Conflicker

Cookie

Cookie Poisoning

Counter-attack

Cryptovirus

CutWail Botnet

CVE

Cyber Ransom

D

Darknet

Darkness (Optima)

DarkSky

Dark Web

Deep Web

Distributed Denial-of-Service (DDoS) Attack

DNS Amplification Attack

DNS Flood

DoS (Denial-of-Service) Attack

DrDos Attack

Duqu

E

Exploit

F

Flame

Flood

Fraggle Attack

Fragmented ACK Attack

G

Guy Fawkes Mask

H

Hacker

Hacktivist

Hijackware

High-rate Attack

HOIC (High Orbit Ion Cannon)

Honeypot

Hping

HTTP Challenge

HTTP Flood

HTTP Fragmentation Attack

I

I2P (Invisible Internet Project)

ICMP Flood

Ingress Filtering (InFilter)

Internet Pipe Saturation

IP Address

IP Spoofing

IRC (Internet Relay Chat)

ISP (Internet Service Provider)

itsoknoproblembro

Izz ad-Din al-Qassam Cyber Fighters

J

JenX

JS Cookie Challenges

K

Keylogging

L

LAND Attack

LOIC (Low Orbit Ion Cannon)

Low-rate Attack

LulzSec

M

Malware

Man-in-the-Browser Attack

Man-in-the-Middle Attack

Memcached

Mirai

Mitigating Controls

Mobile LOIC

Morris Worm

MSSP

Mydoom

N

Naptha Attacks

Network Scan

Nuke

O

Open DNS Resolver

Operation Ababil

Operation AntiSec

Operation Blackout

Operation Defense

Operation Killing Bay

Operation Payback

OpIcarus

OpIsrael

OpKillingBay

OpSingleGateway

P

Packet

Pandex Botnet

Parasiteware

Peer to Peer Attack

Ping of Death

PitbullBot

Port Scan

Pushdo Botnet

Putinstresser

Pyloris

Q

No terms currently listed.

R

Ransomware

Ransom DDoS

Rate Limit

RFI/LFI

Reflector/Reflective DoS attacks

Reflector server

Resident Virus

R.U.D.Y. (R-U-Dead-Yet?)

S

Scareware

Session Hijacking

Stabuniq

SQL Injection

SIP Register flood

SIP Malformed Attack

SIP Server Flood

SSL Garbage Flood

Scrubbing Center

SIP brute force

SIP Client Call Flood

SYN cookies

Stuxnet

Slow-Rate Attack

Social Engineering

Smurf Attack

Slowloris

Sockstress

SYN-ACK Flood

SYN Flood

T

Topera

Tor's Hammer

TOR

TCP Flood

Trin00

TheWikiBoat

THC-SSL DoS

Trojan Horse

Traffic

TDL-4 (Alureon)

TCP Window Scaling

Teardrop Attack

U

UDP Flood

V

Vulnerability

Vulnerability Scanner

W

WannaCry

Wireshark

Web Scraping

Worm

X

XerXeS

Y

No terms currently listed.

Z

Zeus

Zero-Day/Zero-Minute Attack

Zombie

DDoS Attack Definitions - DDoSPedia

TDL-4 (Alureon)

DDoSPedia Index