Pro-Putin goons claim responsibility for blowing US airport websites offline
(2022/10/10)
- Reference: 1665425548
- News link: https://www.theregister.co.uk/2022/10/10/ddos_us_airport_websites/
- Source link:
Updated Russian miscreants claimed responsibility for knocking more than a dozen US airports' websites offline on Monday morning in what appeared to be a large-scale, distributed-denial-of-service (DDoS) attack.
At 0800 PT, Hartsfield-Jackson Atlanta International Airport's website was down and Chicago O'Hare International Airport's website displayed a 503 error with the message "www.flychicago.com is currently unable to handle this request." At time of publication, the Atlanta site is blocked while Chicago is operational again.
At the same time, one of The Reg 's own vultures was boarding a plane in Chicago and reported no operational issues at the gate. "Fingers crossed no disruptions crop up in the next 20 mins," our scribe said. Other airports' websites, including Los Angeles International, were alternately extremely slow or offline.
[1]
A spokesperson for the US Transportation Security Administration, when reached by The Register , said to contact the airports directly about the issue. None of the airports contacted by The Register were immediately available to comment.
[2]
[3]
According to [4]CNN , no immediate signs of impact to air travel were reported at the 14 airports targeted in the DDoS attack. No core systems are thought to have been cracked; it's a basic buy-enough-bots PR stunt.
Russian hacktivist group Killnet claimed responsibility for the network-traffic flooding incidents, and released the [5]names and websites of the airports hit, according to security researchers on Twitter:
[6]#killnet has released a target list of [7]#USA airports. According to [8]@AlvieriD [9]#Chicago O'hare airport and [10]#Atlanta airport two of the biggest in the US been having issues for several hours. [11]#cybersecurity [12]#infosec [13]#RussiaUkraineWar [14]#UkraineRussiaWar [15]#America [16]#cyberattack [17]pic.twitter.com/mk16qjXTcS — CyberKnow (@Cyberknow20) [18]October 10, 2022
This same pro-Russian group, known for conducting other DDoS attacks, which also claimed responsibility last week for [19]downing US state government websites in Colorado, Kentucky, Mississippi and other states. The rationale was America's continued support for Ukraine since the Kremlin illegally invaded its neighboring country in February.
In recent months Killnet has also claimed responsibility for similar cyberattacks against government and corporate websites in [20]Lithuania , [21]Romania and [22]Japan .
[23]Cyber-snoops broke into US military contractor, stole data, hid for months
[24]How one Ukrainian software maker planned for survival as invaders approached
[25]Eastern European org hit by second record-smashing DDoS attack
[26]Ukraine fears 'massive' Russian cyberattacks on power, infrastructure
Ukraine's Defense Ministry in late September [27]warned that Russian cyber goons planned to ramp up their cyberattacks against that country and its allies. In addition to targeting Ukrainian energy facilities, The Kremlin also intends to increase the intensity of DDoS attacks on the critical infrastructure of Ukraine's closest allies, primarily Poland and the Baltic States," the Ukrainian government warned.
DDoS floods against Ukraine [28]and its friends has been a favorite Russian tactic since even [29]before the physical war began. These network traffic assaults hit an [30]all-time high during the first quarter of 2022.
[31]
The new DDoS events against US airports follow [32]massive missile strikes against at least 10 Ukrainian cities on Monday. ®
Updated to add
A CISA spokesperson told The Register that the agency "is aware of reports of DDoS attacks targeting multiple US airport websites. We are coordinating with potentially impacted entities and offering assistance as needed."
Get our [33]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y0SV9O1-@B8BiQ9KqphvtwAAAEo&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y0SV9O1-@B8BiQ9KqphvtwAAAEo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y0SV9O1-@B8BiQ9KqphvtwAAAEo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://www.cnn.com/2022/10/10/us/airport-websites-russia-hackers/index.html
[5] https://twitter.com/Cyberknow20/status/1579448353976647687
[6] https://twitter.com/hashtag/killnet?src=hash&ref_src=twsrc%5Etfw
[7] https://twitter.com/hashtag/USA?src=hash&ref_src=twsrc%5Etfw
[8] https://twitter.com/AlvieriD?ref_src=twsrc%5Etfw
[9] https://twitter.com/hashtag/Chicago?src=hash&ref_src=twsrc%5Etfw
[10] https://twitter.com/hashtag/Atlanta?src=hash&ref_src=twsrc%5Etfw
[11] https://twitter.com/hashtag/cybersecurity?src=hash&ref_src=twsrc%5Etfw
[12] https://twitter.com/hashtag/infosec?src=hash&ref_src=twsrc%5Etfw
[13] https://twitter.com/hashtag/RussiaUkraineWar?src=hash&ref_src=twsrc%5Etfw
[14] https://twitter.com/hashtag/UkraineRussiaWar?src=hash&ref_src=twsrc%5Etfw
[15] https://twitter.com/hashtag/America?src=hash&ref_src=twsrc%5Etfw
[16] https://twitter.com/hashtag/cyberattack?src=hash&ref_src=twsrc%5Etfw
[17] https://t.co/mk16qjXTcS
[18] https://twitter.com/Cyberknow20/status/1579448353976647687?ref_src=twsrc%5Etfw
[19] https://amp.cnn.com/cnn/2022/10/05/politics/russian-hackers-state-government-websites/index.html
[20] https://www.reuters.com/technology/russias-killnet-hacker-group-says-it-attacked-lithuania-2022-06-27/
[21] https://www.straitstimes.com/world/europe/pro-russian-hacking-group-killnet-attacks-romanian-websites
[22] https://english.kyodonews.net/news/2022/09/9846d4bf7aee-pro-russia-hacker-group-stops-cyberattacks-on-japan-due-to-money-woes.html
[23] https://www.theregister.com/2022/10/05/military_contractor_hack/
[24] https://www.theregister.com/2022/09/28/macpaw_ukraine_war/
[25] https://www.theregister.com/2022/09/16/record_european_ddos_attack_akamai/
[26] https://www.theregister.com/2022/09/27/russia_plans_massive_cyberattacks_ukraine/
[27] https://www.theregister.com/2022/09/27/russia_plans_massive_cyberattacks_ukraine/
[28] https://www.theregister.com/2022/09/16/record_european_ddos_attack_akamai/
[29] https://www.theregister.com/2022/02/23/ukraine_ddos_russia_malware/
[30] https://www.theregister.com/2022/04/26/kaspersky_ddos_up/
[31] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y0SV9O1-@B8BiQ9KqphvtwAAAEo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[32] https://www.nytimes.com/live/2022/10/10/world/russia-ukraine-war-news
[33] https://whitepapers.theregister.com/
At 0800 PT, Hartsfield-Jackson Atlanta International Airport's website was down and Chicago O'Hare International Airport's website displayed a 503 error with the message "www.flychicago.com is currently unable to handle this request." At time of publication, the Atlanta site is blocked while Chicago is operational again.
At the same time, one of The Reg 's own vultures was boarding a plane in Chicago and reported no operational issues at the gate. "Fingers crossed no disruptions crop up in the next 20 mins," our scribe said. Other airports' websites, including Los Angeles International, were alternately extremely slow or offline.
[1]
A spokesperson for the US Transportation Security Administration, when reached by The Register , said to contact the airports directly about the issue. None of the airports contacted by The Register were immediately available to comment.
[2]
[3]
According to [4]CNN , no immediate signs of impact to air travel were reported at the 14 airports targeted in the DDoS attack. No core systems are thought to have been cracked; it's a basic buy-enough-bots PR stunt.
Russian hacktivist group Killnet claimed responsibility for the network-traffic flooding incidents, and released the [5]names and websites of the airports hit, according to security researchers on Twitter:
[6]#killnet has released a target list of [7]#USA airports. According to [8]@AlvieriD [9]#Chicago O'hare airport and [10]#Atlanta airport two of the biggest in the US been having issues for several hours. [11]#cybersecurity [12]#infosec [13]#RussiaUkraineWar [14]#UkraineRussiaWar [15]#America [16]#cyberattack [17]pic.twitter.com/mk16qjXTcS — CyberKnow (@Cyberknow20) [18]October 10, 2022
This same pro-Russian group, known for conducting other DDoS attacks, which also claimed responsibility last week for [19]downing US state government websites in Colorado, Kentucky, Mississippi and other states. The rationale was America's continued support for Ukraine since the Kremlin illegally invaded its neighboring country in February.
In recent months Killnet has also claimed responsibility for similar cyberattacks against government and corporate websites in [20]Lithuania , [21]Romania and [22]Japan .
[23]Cyber-snoops broke into US military contractor, stole data, hid for months
[24]How one Ukrainian software maker planned for survival as invaders approached
[25]Eastern European org hit by second record-smashing DDoS attack
[26]Ukraine fears 'massive' Russian cyberattacks on power, infrastructure
Ukraine's Defense Ministry in late September [27]warned that Russian cyber goons planned to ramp up their cyberattacks against that country and its allies. In addition to targeting Ukrainian energy facilities, The Kremlin also intends to increase the intensity of DDoS attacks on the critical infrastructure of Ukraine's closest allies, primarily Poland and the Baltic States," the Ukrainian government warned.
DDoS floods against Ukraine [28]and its friends has been a favorite Russian tactic since even [29]before the physical war began. These network traffic assaults hit an [30]all-time high during the first quarter of 2022.
[31]
The new DDoS events against US airports follow [32]massive missile strikes against at least 10 Ukrainian cities on Monday. ®
Updated to add
A CISA spokesperson told The Register that the agency "is aware of reports of DDoS attacks targeting multiple US airport websites. We are coordinating with potentially impacted entities and offering assistance as needed."
Get our [33]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y0SV9O1-@B8BiQ9KqphvtwAAAEo&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y0SV9O1-@B8BiQ9KqphvtwAAAEo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y0SV9O1-@B8BiQ9KqphvtwAAAEo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://www.cnn.com/2022/10/10/us/airport-websites-russia-hackers/index.html
[5] https://twitter.com/Cyberknow20/status/1579448353976647687
[6] https://twitter.com/hashtag/killnet?src=hash&ref_src=twsrc%5Etfw
[7] https://twitter.com/hashtag/USA?src=hash&ref_src=twsrc%5Etfw
[8] https://twitter.com/AlvieriD?ref_src=twsrc%5Etfw
[9] https://twitter.com/hashtag/Chicago?src=hash&ref_src=twsrc%5Etfw
[10] https://twitter.com/hashtag/Atlanta?src=hash&ref_src=twsrc%5Etfw
[11] https://twitter.com/hashtag/cybersecurity?src=hash&ref_src=twsrc%5Etfw
[12] https://twitter.com/hashtag/infosec?src=hash&ref_src=twsrc%5Etfw
[13] https://twitter.com/hashtag/RussiaUkraineWar?src=hash&ref_src=twsrc%5Etfw
[14] https://twitter.com/hashtag/UkraineRussiaWar?src=hash&ref_src=twsrc%5Etfw
[15] https://twitter.com/hashtag/America?src=hash&ref_src=twsrc%5Etfw
[16] https://twitter.com/hashtag/cyberattack?src=hash&ref_src=twsrc%5Etfw
[17] https://t.co/mk16qjXTcS
[18] https://twitter.com/Cyberknow20/status/1579448353976647687?ref_src=twsrc%5Etfw
[19] https://amp.cnn.com/cnn/2022/10/05/politics/russian-hackers-state-government-websites/index.html
[20] https://www.reuters.com/technology/russias-killnet-hacker-group-says-it-attacked-lithuania-2022-06-27/
[21] https://www.straitstimes.com/world/europe/pro-russian-hacking-group-killnet-attacks-romanian-websites
[22] https://english.kyodonews.net/news/2022/09/9846d4bf7aee-pro-russia-hacker-group-stops-cyberattacks-on-japan-due-to-money-woes.html
[23] https://www.theregister.com/2022/10/05/military_contractor_hack/
[24] https://www.theregister.com/2022/09/28/macpaw_ukraine_war/
[25] https://www.theregister.com/2022/09/16/record_european_ddos_attack_akamai/
[26] https://www.theregister.com/2022/09/27/russia_plans_massive_cyberattacks_ukraine/
[27] https://www.theregister.com/2022/09/27/russia_plans_massive_cyberattacks_ukraine/
[28] https://www.theregister.com/2022/09/16/record_european_ddos_attack_akamai/
[29] https://www.theregister.com/2022/02/23/ukraine_ddos_russia_malware/
[30] https://www.theregister.com/2022/04/26/kaspersky_ddos_up/
[31] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y0SV9O1-@B8BiQ9KqphvtwAAAEo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[32] https://www.nytimes.com/live/2022/10/10/world/russia-ukraine-war-news
[33] https://whitepapers.theregister.com/
Re: Sounds like a load of bluster
heyrick
This.
On sunny days it's amusing to watch the planes fly over and imagine the sorts of stories of people on those aircraft.
So I pop over to the website of the nearby (about 40 miles away) little airport. Which on any given day may or may not be working, may or may not be showing the right day. Or the right flights of that day. Once it was telling me that several flights were inbound from Asia (Thailand, Singapore, etc). Nope, not possible. Any plane of that size trying to land at this airport is going to end up in a lake on the other side of a motorway.
One time I phoned the airport. The person was like "what, already?" and told me what planes were coming in and when. All seven of them.
So taking out an airport website is going to be an inconvenience more than "oh god the planes are falling out of the sky".
Anonymous Coward
Agreed. Not for the first time, Russia has picked a bad target and failed.
It’s annoying…
Anonymous Coward
…that as civilized countries with massive armies we have to put up with all this nonsense. But, that’s why the West is/was successful in leading the free world.
Leave stupid emotional retaliation to the dictators of this world…
Sounds like a load of bluster
If you live in the US then "blowing US airport websites offline" is a nonsense. Flying is a bit of a crapshoot at the best of times and usually its so chaotic and random that an individual airports website 'going down' would be lost in the noise, I doubt if a traveler would notice.