|
Well for the last couple of weeks we’ve have lots of warnings of pending Electronic Jihad by various sources in Islamic Fundamentalist Computer Underground. It was all set to happen on November 11th to kick off mass Denial of Service of ‘Christian West’ targets.
There was even a Windows DDoS tool released, it was nothing special, all it would do would send a Ping style type of Denial of Service attack. The site that provided software quickly shutdown and it is detected by many of the Anti-Virus packages. So did it all kick off, well no, it looks like nothing much happened over the last 48 hours or so and the predicted Electronic Jihad pretty much didn’t happen. There have however been some interesting comparisons over the last week or so between the ‘E-Jihad’ and the Criminal Gangs running botnets such as the ‘Storm Gang’ and the like. The general consensus is that those trying to perpetrate the ‘E-Jihad’ are well behind the criminal gangs in terms of what they control botnet wise and the types of technology used to build the botnet. The botnets run by the Storm gang for instance are built using compromised systems, which are compromised using the latest vulnerabilities along with malware code that is changed frequently to avoid detection. As a result new systems are added daily and systems are lost daily too. However, the beauty of the approach taken is that they can capture a lot of machines to built their botnet quickly. The botnet that the people behind the E-Jihad tool attempted to create was purely voluntary, and would be limited purely by how many people they can convince to run the tool. Here is the source of their problem, as soon as they publicise they need people to take part they will garner the attention that they have gained this last week. The end result is that the Anti-Virus companies will add their tool to their signatures, have any support web sites closed down, which is pretty much what happened. The short coming of this approach is that the resulting botnet will be small, and that the attack will probably get shut down pretty quickly.
|