Web attackers knock out Microsoft sites

Daily Newsletters

Sign up to ZDNet UK's daily newsletter.

NEWS
Network attackers overwhelmed Microsoft's connection to the Internet on Thursday, causing traffic to the company's major Web sites to slow to a crawl. "During the morning of 25 January, Microsoft was the target of a denial-of-service attack against the routers that direct traffic to the company's Web sites," Microsoft said in a statement late Thursday afternoon. "As a result, access to some of the Microsoft Internet properties, including Microsoft.com and MSN.com, was intermittent for many customers throughout this morning." The company emphasised that Thursday's attack, which began in the morning and extended into the afternoon, was not related to the technical glitch that crippled its sites late Tuesday and most of Wednesday. Microsoft said it has asked the FBI to investigate and that the company's Web sites were fully functioning late Thursday. The timing and duration of the embarrassing outage came as Microsoft -- which operates the third most-visited sites on the Web -- is trying to bolster its reputation among corporate customers. The company launched a $200m (£121m) advertising campaign Monday touting its business software in competition with Oracle, IBM and Sun Microsystems. The theme for the ads is "software for the agile business". A denial-of-service attack overloads a site's servers with a flood of data, effectively blocking surfers from accessing the site. In this case, the attack was aimed not at the servers, but at the hardware switches that route data to the Web sites, Microsoft said. After hackers flooded these so-called routers, legitimate requests for Web pages could not be processed by Microsoft's servers. According to networking consultancy Keynote Systems, at the height of the attack, as little as two percent of the requests for Microsoft Web pages were being completed Thursday. Normally, sites are able to fulfill 97 percent of all page requests, said Keynote representatives. "For about two hours, the attack was a hundred percent successful," said Eric Siegel, senior Internet consultant for Keynote. Siegel noted that a flaw in Microsoft's network design -- which was highlighted by Tuesday's and Wednesday's outages -- may have given the attackers the idea to flood Microsoft's key routers. The flaw: The Redmond, Washington company connected its key DNS (domain name service) servers to a single switch that acted as the spigot for data going to the Internet. DNS servers act as phone books for the Internet, linking Web sites names, such as Microsoft.com and Yahoo.com, to the numerical computer addresses that locate the proper server on the network. "If Microsoft is using a single router as the entrance to a series of DNS servers and you take down that router, then the attack would be very successful," Siegel said. Essentially, Microsoft's Web sites would virtually disappear from the Internet. Which is precisely what happened, according to the software giant. Thursday's attack comes almost exactly one year after massive distributed denial-of-service (DDoS) attacks slowed, and in some cases halted, access to eight major Web sites, including Yahoo, eBay and CNN.com. DDoS attacks are denial-of-service attacks that use hundreds of servers to attack a single target, which makes finding the source of the attack much more difficult. Canadian and United States law-enforcement officials are prosecuting a Canadian teenager -- who allegedly used the handle "Mafiaboy" -- as the culprit in the attacks last Feburary. Such attacks are fairly common but rarely so damaging, said Elias Levy, chief technology officer for security Web site SecurityFocus.com. "They tend to occur nowhere near the magnitude of taking down Microsoft," he said. "But they do happen quite often to individual Web sites -- more often than most people know." Microsoft's network of Web properties ranks as the third most-visited destination on the Internet. According to Net research company Jupiter Media Metrix, Microsoft Web sites drew 54 million unique visitors in December, trailing only America Online's 61 million and Yahoo's 55 million. No suspects have been named in the current investigation. FBI officials in Washington DC, and San Francisco could not be reached for comment late Thursday. The Sun vs. Microsoft Java suit brought out the worst among the software-wars rhetoric slingers. Mary Jo Foley advises that you prepare yourselves for more wars of words between the two archrivals during the next few weeks, as Sun rolls out its Web services strategy. Go to AnchorDesk UK for the news comment. Have your say instantly, and see what others have said. Click on the TalkBack button and go to the ZDNet News forum. Let the editors know what you think in the Mailroom. And read other letters.

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

BrownieBoy

@Jack, > Works really well for thieves.... Nice attempt to deflect the argument by tossing in a point that's totally irrelevant, even it were...

10 hours ago by BrownieBoy on AMD Ultrathins to challenge Intel Ultrabooks
bootlegger

Make that 13 people now - I got refused today at Manchester airport. I thought I was up to date on this legislation - I knew of the EU ruling from...

13 hours ago by bootlegger on UK airport body scans will not be opt out
tinycg

Don't forget to check out apps like GoodReader or SlideShark either, they're indispensible for people on the go in presentation situations. Best...

15 hours ago by tinycg on Four top iPad apps for people on the move
TerryRK

Well it seems there is something a number of us agree on. Why is the Ubuntu Unity launcher so ugly? I thought perhaps it was something to do with...

20 hours ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint
Freebies202

Duplicate comments are not made intentionally. Its very good to know that now you are keeping check on this problem because sometimes a commenter...

1 day ago by Freebies202 on Microsoft fixes blog comments, speeds up blogs with open source
kevinmchapman

"the very significant number of users" and "many (most) of us" - you have no evidence for these statements. It is a fact that most users are saying...

2 days ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint
Marg Menzies Harrison

Another grammar faux pas is the improper use of "you". When sitting down down in a restaurant, for example, I get cringe when the waitress...

2 days ago by Marg Menzies Harrison via Facebook on 10 flagrant grammar mistakes that make you look stupid
zdnetukuser

And NOW, folks, for Canonical's next trick... Kubuntu is late. Here's a pencil. Draw your own conclusions. cf.:...

2 days ago by zdnetukuser on Linux Minterface
Moley

@kevinmchapman. The discussion here reflects the very significant number of users who really do like the traditional menu system and who wish to...

2 days ago by Moley on A tale of two distros: Ubuntu and Linux Mint
kevinmchapman

Er, no... It is an efficient means of finding the application/file/setting you need in one place. The icons are a simply a fallback for when you...

2 days ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint
TerryRK

Isn't the provision of a text based search an admission by the developers that the mass of icons approach does not work? I don't need to use a...

2 days ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint
kevinmchapman

"Unity and GNOME 3 both abandon the old text-based cascading menus in favour of a graphical icon-driven system." Point truly missed. Both use a...

2 days ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint
TerryRK

whs001 - Thank you, I'm glad you liked the article. I absolutely agree with you on your first point. I should perhaps have made it clearer that...

2 days ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint
Dennis Nilsson

If we allow corporate interest to dictate the way our government circumvents due process against foreign entities then we should accept the same...

2 days ago by Dennis Nilsson via Facebook on ACTA stumbles in Germany
GHar123

I totally dislike pirating of works, I fear that artists will be deterred from creating works if they think that they are going to get ripped off....

2 days ago by GHar123 on ACTA stumbles in Germany
JCB33

How dare film makers, artists or anybody that invests in creativity stop us pirating their works for free. I want to be able to walk into my local...

2 days ago by JCB33 on ACTA stumbles in Germany
Moley

@GrueMaster. I prefer horses for courses rather than one size fits all. I, and I suspect most other computer users, do not really wish to have...

2 days ago by Moley on A tale of two distros: Ubuntu and Linux Mint
greycynic

The product that scares me every time I have to use it is the Office 2007 version of Excel. The first bug that I found was applying the median...

2 days ago by greycynic on Ten flawed products that derail productivity
GrueMaster

Nice review and very informative. One thing I'd like to add (in reply to whs001's 1st question), the main reason to have the same interface from...

2 days ago by GrueMaster on A tale of two distros: Ubuntu and Linux Mint
Frederick Wrigley

I'be been using Mint 12 since the RC came out, and I am far more happy with the Cinnamon, the Mate, and, yes (with extensions), theGnome 3...

2 days ago by Frederick Wrigley via Facebook on A tale of two distros: Ubuntu and Linux Mint