DNS root server attack launched from Germany

Summary:According to a published report, the recent attack against the DNS root servers was launched from a host server in Germany that controlled millions of zombie machines in South Korea

The distributed denial-of-service attack against the DNS root servers earlier this month was launched from a host server in Germany that controlled millions of zombie machines in South Korea, according to a report in The Korea Times.

Details of the cross-continent attack, which almost took out three of the 13 official root DNS servers are beginning to surface with South Korea's ministry of information and communication confirming that a host server in Coburg, Germany ordered hijacked Windows machines in Korea to stage the attacks.

"In other words, Korean computers affected by viruses made raids into the root servers as instructed by the German host server. Many of our computers acted like zombies,'' said Lee Doo-won, a director at the ministry.

According to data from the North American Network Operators' Group, more than 60 percent of the problematic data was traced to South Korea, a country one of the highest broadband penetration rates in the world.

According to Arbor Network's ATLAS portal, South Korea hosts the second highest number of botnet command-and-control servers that are used to launch spam runs, host exploit sites and launch DDoS attacks.

Topics: Security, Networking, Servers


Ryan Naraine is a journalist and social media enthusiast specializing in Internet and computer security issues. He is currently security evangelist at Kaspersky Lab, an anti-malware company with operations around the globe. He is taking a leadership role in developing the company's online community initiative around secure content managem... Full Bio

zdnet_core.socialButton.googleLabel Contact Disclosure

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.