Latvijas IT drošības ziņu centrmezgls. Informācijas iesniegšana. Avota konfidencialitāti garantējam.

Latviešu WordPress blogi tiek izmantoti pakalpojumatteices uzbrukumu veikšanai

Kategorija: Incidenti


At issue is the “pingback” function, a feature built into WordPress and plenty of other CMS tools that is designed to notify (or ping) a site that you linked to their content. Unfortunately, like most things useful on the Web, the parasites and lowlifes of the world are turning pingbacks into a feature to be disabled, lest it be used to attack others.

“Any WordPress site with Pingback enabled (which is on by default) can be used in DDOS attacks against other sites,” Sucuri’s Daniel Cid wrote. “One attacker can use thousands of popular and clean WordPress sites to perform their DDOS attack, while being hidden in the shadows, and that all happens with a simple ping back request.”

My hosting provider shared with me a list of the WordPress blogs that were used in the attack on this blog. I’m sharing it here to get the attention of WordPress administrators.

Uzbrukumos izmantotie blogi, kas satur .lv domēna vārdus:

Brian Krebs:

2014-03-24  »  edgars

  1. Imants
    27 March 2014 @ 10:38

    Spraudnis-risinājums šai problēmai ir pieejams wordpress spraudņu katalogā:

Re: Latviešu WordPress blogi tiek izmantoti pakalpojumatteices uzbrukumu veikšanai

Tags you can use (optional):
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>