"ICUK told The Register that the DDoS attacks began on Monday evening, at around 2000 local time (1900 UTC), first targeting its core network, which caused service delivery disruption. The company's Cloudflare DDoS protection kicked in and, within two hours, it had fully mitigated the attack. The attackers launched "several further attempts" against the network since then, but ICUK said Cloudflare blocked each of them."
"However, by 11:20 UK time the following day, ICUK's status page indicated that its VoIP platform was still experiencing issues "as a knock-on effect from yesterday evening's network impact." ICUK performed an emergency restart of its VoIP platform that evening, after business hours, and by 18:03 its services were running at near-normal levels again."
"While ICUK was handling that side of the attack, a second wave of DDoS traffic was being fired, this time at the company's Control Panel app and infrastructure. The telecoms provider, which serves resellers, said the attacks used DNS amplification techniques as part of this. Some customers were unable to access their ICUK control panel until after business hours on Tuesday, at which point the company said the matter was resolved."
A multi-day distributed denial-of-service attack began Monday evening targeting ICUK's core network and causing service delivery disruption. Cloudflare DDoS protection activated and fully mitigated the initial attack within two hours, with subsequent attempts blocked. A knock-on effect left the VoIP platform impaired the following morning; an emergency restart after business hours returned services to near-normal by 18:03. A second wave targeted the Control Panel using DNS amplification, preventing some customers from accessing the panel until after business hours on Tuesday, when access was restored. Broadband and general connectivity services remained unaffected.
Read at Theregister
Unable to calculate read time
Collection
[
|
...
]