Итгэмжлэлийг бөглөх нь DDoS биш юм!

Сүүлийн хэдэн жилийн хугацаанд би үүнийг олон удаа сонссон: Хэн нэгэн вэбсайт дээрээ DDoS халдлагад өртөж байна. Би тэднээс ямар төрлийн халдлагад өртөж байгааг асуухад, Хариулт нь ихэвчлэн муу хүмүүс тэдэнд мянга, бүр сая сая POST хүсэлт илгээдэг. Эдгээр хүсэлтүүд хаашаа чиглэж байгааг асуухад, Хариулт нь ихэвчлэн бүртгүүлэх эсвэл нэвтрэх хуудас юм!

Итгэмжлэл бөглөх халдлага нь HTTP үерийн DDoS халдлага биш бөгөөд илүү аюултай. These attacks may cost organizations millions of dollars in data loss and reputation damage. While an HTTP flood DDoS attack floods a website with traffic, overloading and crashing the server, a credential stuffing attack is a more targeted and insidious form of cyberattack. In a credential stuffing attack, hackers use automated bots to try thousands or millions of stolen usernames and passwords on website login pages to gain unauthorized access to users’ accounts. Currently, sale of stolen credentials are one of the most profitable businesses for criminals and those credentials are being used for credential stuffing attacks.

Unlike HTTP flood DDoS attacks, which are primarily aimed at disrupting website operations, credential stuffing attacks focus on stealing sensitive data, such as personal and financial data from compromised user accounts. These attacks can have a significant impact on a company’s bottom line as it can lead to data loss, regulatory damages, and even legal liability. Credential stuffing attacks can be particularly devastating for organizations that store sensitive customer data, such as financial sector, healthcare providers, and e-commerce companies. If a hacker gains access to your account, they can steal credit card information, social security numbers, and other sensitive data.

In addition to the direct economic losses from credential stuffing attacks, there are also indirect costs such as loss of customer trust and damage to an organization’s reputation. Customers may be reluctant to do business with companies affected by high-profile data breaches, and the negative publicity associated with attacks can be difficult to overcome.

To protect against credential stuffing attacks, organizations should implement strong authentication measures автоматжуулсан роботууд хэрэглэгчийн бүртгэлд зөвшөөрөлгүй нэвтрэхээс сэргийлэхийн тулд олон хүчин зүйлийн баталгаажуулалт, CAPTCHA зэрэг. Мөн та өөрийн системд сэжигтэй үйлдлийн шинж тэмдэг байгаа эсэхийг хянаж, хэрэглэгчдэд дансны эвдрэлийн талаар сэрэмжлүүлэх хэрэгтэй. Хэрэв ийм тохиолдол гарсан бол ослын эсрэг хариу арга хэмжээ авах баттай төлөвлөгөө байх ёстой.