Hello, welcome to the Monday, October 24th, 2016 edition of the Sands and Storm Center's Stormcast. My name is Johannes Ulrich, and I'm recording from Jacksonville, Florida.

And of course, we have to start today with the denial of service attack against Dine from Friday. Last Friday, Dine was under a massive

denial of service attack that had some widespread repercussions. In particular, customers

of Dine that were not reachable because Dine wasn't able to resolve their host names.

Some of the names were Twitter, Netflix, Spotify,

but the list goes on.

There are thousands of sites, thousands of companies

that were affected by this outage.

It has been widely acknowledged that this attack was yet another event that was

precipitated by the Mirai Botnet. We talked about this before and Dyn is talking about

tens of millions of IP addresses that participated in the attack. That sounds a little bit large. My current guess is that

the Mirai botnet is more around a million hosts. Now typically attacks that come from Mira are

not spoofed. It's possible that there were other botnets that contributed to the attack as well so it wasn't just myri but then again

if you experience a very large attack like this sometimes monitors and such don't work correctly

so it could just be an artifact in how the data is collected that they came up with that big number.

Regardless, it was a very big attack.

We have seen, for example, with the Brian Krebs attack, what this botnet is capable of.

Eventually, Dyn was able to limit the impact of the attack, and it sounds like at this point that the attack has

stopped. But what this really means for the future is the Mirai botnet is still out there.

ISPs are working on sort of disrupting the command control channel, but it's just a matter of time

at this point that whoever is control of that

botnet is redirecting it to a different target and while there are plenty of

...