Popular text-sharing site Pastebin has come under attack for the second time this week, falling victim to a distributed denial of service (DDoS) attack.
Pastebin experienced heavy loads this morning, as it worked to resolve the issue.
(Screenshot by Michael Lee/ZDNet Australia)
The site allows developers and programmers to store large code or configuration information that they can then share with others.
Pastebin has only recently recovered from the DDoS attack that downed the site on Wednesday morning. Early this morning, Pastebin tweeted that it was under attack again, stating that the attack was "a big one". It has since resolved the issue.
Ironically, the site has become a popular tool for hackers, with many using it to post information such as personal information and password lists.
Pastebin doesn't allow the posting of emails, passwords or personal information under its acceptable-use policy, and threatens to punish such behaviour by banning offending users' IP addresses from the website, but it is general knowledge in the hacking community that this is easily circumvented.
The site has been used to release internal data gleaned from the hack on Booz Allen Hamilton, provide verification that certificate authorities had been hacked into, coordinate DDoS attacks, release information on how water utilities could be hacked into and, most recently, data on how to obtain information from the Stratfor hack.
In Stratfor's case, according to the log of commands used in the attack, hackers uploaded the code to deface the site to Pastebin for temporary holding. Once they had control of Stratfor's systems, they then downloaded the source code directly from the compromised computer.
No hacking groups have yet stepped forth and claimed responsibility for the DDoS attack.