Attacker Behavior Industry Report, 1Q 2017
SOC workload reduction of 168X
In a 90-day period
BGP hijackers: “This traffic is going to Russia!”
by Chris Morales
Traffic sent to and from major internet sites was briefly rerouted to an ISP in Russia by an unknown party. The likely precursor of an attack, researchers describe the Dec. 13 event as suspicious and intentional.
According to BGPMON, which detected the event, starting at 04:43 (UTC) 80 prefixes normally announced by several organizations were detected in the global BGP routing tables with an Origin AS of 39523 (DV-LINK-AS), out of Russia.
Vectra in the news