Hackers out of luck on sales
[ad_1]
Ukrainian hackers announced attacks on Russian marketplaces on November 11, World Shopping Day, when massive sales take place. On specialized forums, hackers declared their desire to disable the resources of companies and interfere with earnings. However, Russian companies turned out to be prepared for such actions of intruders.
On November 11, Kommersant discovered messages on hacker forums and thematic Telegram channels calling for DDoS attacks on Russian online retail. In particular, the hackers listed the Ozon marketplace as one of their targets.
On November 11, marketplaces hold sales dedicated to World Shopping Day, or Singles Day. This was the reason for the attackers to disable the infrastructure of Russian sites, thereby hindering their earnings, follows from their messages. “The attacks were announced and announced in advance in various social media channels,” confirms Alexander Lyamin, founder and CEO of Qrator Labs.
Kommersant sent requests to Ozon, Yandex.Market, Wildberries and AliExpress. AliExpress and Ozon declined to comment on the attacks. But a Kommersant source close to the company said that the company’s specialists had observed an influx of illegitimate traffic since the morning. Wildberries reported that they did not notice the attacks.
There were no user complaints about massive failures in the operation of marketplaces on November 11. But this does not mean that there were no attempts to destabilize the work of the sites, cyber defense experts say, the attacks simply did not go through.
Hacker activity began to grow at the beginning of the week, when stores announced sales, Dmitry Nikonov, head of L7 protection at the DDoS-Guard company, testifies. On November 11, according to him, attack traffic increased significantly. Malicious traffic can be distinguished from an influx of customer requests by context, Alexander Lyamin explains: “Real users react in a certain way to both the design and content of web resources, so malicious traffic can be detected using behavioral analysis and monitoring.” People usually look at products, pictures in catalogs, move the mouse, and bots carrying malicious traffic can be identified by the frequency of the same type of requests to the page, says Shamil Chich, an analyst at the IZ:SOC cyberattack monitoring and counteraction center at Informzaschita.
By mid-2022, the number of attacks on retail as a whole had almost doubled compared to the beginning of the year, and most often hackers used ransomware viruses (malicious programs) against companies. Experts explained the attackers’ interest in this segment by the fact that marketplaces lose profit due to a stop in sales and are ready to pay a ransom for the speedy restoration of work (see “Kommersant” dated July 25).
Buyers have been waiting for promotions for the Singles Day on retailer platforms: according to Platforma, 25% of users planned to purchase something at a discount exactly on November 11, while the rest – at the end of the month (November 25, the Black Friday sales period starts) and before the New Year . Also, 25% of consumers were going to spend 10-20 thousand rubles during sales, 24% – 20-40 thousand rubles. (see “Kommersant” dated November 8). As Kommersant was told in Ozon, in the first four hours of the action alone, the turnover of the marketplace exceeded 1 billion rubles, sales on the night of November 11 were 7.5 times higher than on the average night in November 2022.
On Black Friday, we should expect an even sharper surge in DDoS attacks on online stores, and the risk of ransom demands for stopping an attack carried out in the most profitable period is also increasing, Informzashita predicts.
[ad_2]
Source link
