Cyber Fighters’ DDoS Hits Two Credit Unions
The bland name hides the lethal intent of DDoS when aimed at financial institutions, an event that has become increasingly common as dozens of large banks have recently found their online operations crippled, sometimes for days by highly skilled cyber-attackers.
DDoS, distributed denial of service, works by overwhelming a designated Web target with traffic, in many cases 100 times the normal traffic, possibly 1,000 times more throughput. The site responds by shutting down, meaning that legitimate users, members who want to log in to check balances or pay a bill, cannot do so. Usually what they see is a “This site is unavailable” notice, and the site may be down for a few hours, possibly a couple of days.
The theory is that the big banks had hardened their defenses, buying sophisticated services from companies like Akamai, and the Cyber Fighters’ attacks had been fizzling out. So they branched out into smaller financial institutions, and one consequence was a takedown of a couple credit unions.
One large worry is that many credit unions have minimal or no defenses against DDoS.