Trusted Design

20160207: ASSERT-2015-07 Black Energy usage of NTP attacks

概要

This incident describes a UDP-based reflection attack which is NTP attack implemented by Black Energy, are already responsible for generating some of the largest volumetric DDoS floods observed on the modern Internet. Black Energy's NTP plugin exhibits an impressive level of attention to detail relative to many other DDoS-centric malware families. It contains a command called monlist which can be sent to an NTP server for monitoring purposes. It returns the addresses of up to the last 600 machines

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• ntp MON_GETLIST query amplification ddos (score: 0.83)
• NTP DDoS (score: 0.68)
• 20160203-BlackEnergy by maldoc,Malware (score: 0.57)
• DDoS malware infection (score: 0.56)
• BlackEnergy APT Attacks in Ukraine employ spearphishing Word (score: 0.55)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る