With unrest in Iran, cyber-attacks begin
The apparently ad-hoc effort has knocked sites offline
IDG News Service - An apparently ad-hoc cyber protest against the results of recent Iranian elections has knocked key Web sites offline.
On Monday, sites belonging to Iranian news agencies, President Mahmoud Ahmadinejad and Iran's supreme leader Ayatollah Ali Khamenei, were knocked off-line after activists opposed to the Iranian government posted tools designed to barrage these Web sites with traffic.
This type of attack, known as a denial of service (DoS) attack, has become a standard political protest tool, and has been used by grassroots protesters in several cyber-incidents over the past few years, including cyber events in Estonia in 2007 and Georgia last year.
Activists had encouraged anti-government protesters to use automatic Web page refresh tools such as Pagereboot.com, to hit government run site. But they have also developed custom DoS tools. One such tool, called BWRaeper was posted to an Iranian sports discussion forum on Monday. Others are being promoted via Twitter and blogs, and hosted by activists in the U.S.
The "campaign is starting to target international users, compared to the original one aiming to recruit Iranians only," said Dancho Danchev, a security consultant who has blogged about the tools. "Judging by the effect this crowdsourcing is having, they've disrupted the sites set as targets."
Danchev counts 12 sites as being under attack, including other news agencies, the Ministry of Foreign Affairs, Ministry of Justice, National Police, and the Ministry of the Interior.
In response to the attacks, state-sponsored Iranian News site Fars News added a small piece of Web code that redirected the attack to pro-opposition Web sites, Danchev said via instant message. "Apparently, they thought that the attackers wouldn't stop their attack since they were also indirectly loading the [attack code]," he added. "They, however, didn't stop the attack."
Web disruptions have occurred on both sides of the dispute. Last month, Iran blocked access to Facebook, apparently to prevent opposition voters from using the social networking service to promote their candidates in last week's elections. YouTube and the BBC's Web site have also reportedly been blocked. BBC satellite service to the country has also been jammed.
General Internet service in Iran was also disrupted, though that lasted for just a short period of time, according to network monitoring company Renesys.
Hundreds of thousands of protesters have taken to the streets in Iran to protest the results of last week's presidential elections. Protesters claim that their candidate, Mir Hossein Mousavi, lost because the election was fixed by the government.
Although it has been reported as inaccessible by some Iranian users, Twitter has emerged as the major source of information on the protests, and is being credited with driving coverage of the event on U.S. television networks such as CNN.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Streamline Compliance and Increase ROI
- Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will...
- Protecting Point of Sale Systems from Targeted Attack
- If you are responsible for protecting retail systems, download this case study to learn how this retailer eliminated the threat of malware on...
- From the Frontline - Preventing APT
- Is your company's network secure? Are your endpoints and servers secured? Before you answer, read this case study on a US Military Command...
- Stop Hackers Before They Attack
- Hacktivism, Identify Theft, Financial Gain, Cyber War - regardless of motivation, stopping today's hackers requires a new proactive approach to protecting endpoints. Learn...
- The four rules of complete web protection
- As an IT manager you've always known the web is a dangerous place. But with infections growing and the demands on your time... All Cybercrime and Hacking White Papers
- WikiLeaks: How am I Affected?
- The latest WikiLeaks episode has raised questions about how organizations and governments protect their sensitive information. While this incident was isolated, it has...
- Optimizing Networks for the Cloud
- Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
- Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
- Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
- Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
- Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and...
- Customer Spotlight: How IPC The Hospitalist Company Implemented Oracle on VMware
- Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn... All Cybercrime and Hacking Webcasts