OpIcarus Re-Engaged

May 5, 2016 03:00 PM

The Hacktivist Group Anonymous announced its plans to relaunch its cyber assaults on leading financial services companies worldwide. Named Operation Icarus, this event is intended to bring public attention to what Anonymous calls 'corruption' inside of the financial services industry.

Download a Copy Now

Abstract

The Hacktivist Group Anonymous announced its plans to relaunch its cyber assaults on leading financial services companies worldwide. Named Operation Icarus, this event is intended to bring public attention to what Anonymous calls 'corruption' inside of the financial services industry. Anonymous contends that leading banks are supporting and funding global terrorism. Several groups, including DragonSec, DeamonSec, Ghost Squad Hackers, and those behind OpIcarus have joined forces to launch a 30-day DDoS campaign.

Background

Radware issued an ERT Alert in February when OpIrcarus was created. At that time, the attackers didn't possess the ability or the organizational skills needed to execute a largescale operation, resulting in a low success rate. The attackers were able to build a large target list but suggested the use of tools (such as LOIC) that can be blocked by a protected site.

This time, attackers appear to have learned from their mistakes and are now suggesting more advanced tools in comparison to LOIC. They are now suggesting hackers to use tools such as TorHammer, SlowLoris, Xerxes and other scripted attacks. In addition, they are claiming this second round of attacks will last for 30 days and target hundreds of sites.

Sources

Reasons for Concern

Financial organizations should proactively prepare their networks with an attack mitigation solution designed to detect, mitigate and report today's most advance threats. This operation has more supporters and is well organized. Attackers have transitioned from suggesting LOIC to a series of scripted tools as well as using VPN's and Tor to mask their identity.

With more attackers and more tools, it is expected that targeted victims will see multiple vectors of attacks at a persistent rate. This operation is set to last for 30 days and it's expected that these attacks will continue to grow in size as a greater audience becomes more aware of the operation.

How to Prepare

Political and ideological-driven attacks such as these can be difficult to avoid. Radware's hybrid attack mitigation solution provides a set of patented and integrated technologies designed to detect, mitigate and report today's most advanced threats. Dedicated hardware and cloud solutions protect against attacks in real time and help ensure service availability.

With Radware, companies can protect their infrastructure from multi-vector attacks, network and application based DDoS attacks as well as volumetric attacks that may saturate the Internet pipe, defacement, information-loss, and other reputation loss impacts of denial of service. Radware solutions include proven protection mechanisms from the vectors listed above. To understand how Radware's 24x7 attack mitigation solutions can better protect your network contact us.

Organizations Under Attack Should Consider

• A security solution that can protect its infrastructure from multi-vector attacks including protection from network and application-based DDoS attacks as well as volumetric attacks that can saturate the Internet pipe
• A hybrid solution that includes on-premise detection and mitigation with cloud-based protection for volumetric attacks. This provides quick detection, immediate mitigation and protects networks from volumetric attacks that aim to saturate the Internet pipe.
• A solution that provides protection against sophisticated web-based attacks and website intrusions to prevent defacement and information theft.
• A cyber-security emergency response plan that includes an emergency response team and process in place. Identify areas where help is needed from a third party.
• Monitor security alerts and examine triggers carefully. Tune existing policies and protections to prevent false positives and allow identification of real threats if and when they occur.
• In addition to Radware products, we recommend that you review your network patch your system according. Maintaining and inspecting your network often is necessary in order to defend against these types of risks and threats.

Under Attack and in Need of Expert Emergency Assistance?

Radware offers a full range of solutions to help networks properly mitigate attacks similar to these. Our attack mitigation solutions provide a set of patented and integrated technologies designed to detect, mitigate and report todays most advanced DDoS attacks and cyber threats. With dedicated hardware, fully managed services and cloud solutions that protect against attacks, Radware can help ensure service availability. To understand how Radware's attack mitigation solutions can better protect your network contact us today.

Target List

Federal Reserve of America

IMF

World Bank

Central Banks around the globe