No passado domingo o website do Bank of Spain foi bombardeado por um ataque DDoS o que deixou o website do banco indisponível.
Um porta-voz do banco disse à Reuters que o ataque não afetou os serviços do banco nem as comunicações com o Banco Central Europeu ou outras instituições.
“It is a denial of service attack that intermittently affects access to our website, but it has had no effect on the normal functioning of the entity,”
Ao que parece, o website esteve em baixo na terça-feira à tarde, e não se sabe se o website esteve em baixo derivado a uma nova vaga de ataques, ou se ainda é o efeito da vaga de ataques de domingo que está a impedir a total recuperação do sistema.
“The recent guidance from the Bank of England (BoE) requires banks to have the cyber-resilience to ‘resist and recover’ with a heavy emphasis on ‘resist’,” Lloyd said. “The BoE guidance is a modern take on the old adage that ‘prevention is better than cure’.”
No entanto é preciso entender que qualquer mecanismo ou infraestrutura que o Bank of Spain tenha atualmente em vigor, mostrou-se totalmente ineficiente para evitar uma ataque DDoS e impedir todo este tempo de downtime.
Pedro Tavares is a professional in the field of information security working as an Ethical Hacker/Pentester, Malware Researcher and also a Security Evangelist. He is also a founding member at CSIRT.UBI and Editor-in-Chief of the security computer blog seguranca-informatica.pt.
In recent years he has invested in the field of information security, exploring and analyzing a wide range of topics, such as pentesting (Kali Linux), malware, exploitation, hacking, IoT and security in Active Directory networks. He is also Freelance Writer (Infosec. Resources Institute and Cyber Defense Magazine) and developer of the 0xSI_f33d – a feed that compiles phishing and malware campaigns targeting Portuguese citizens.
Read more here.