Online attack hits US government Web sites
IDG News Service - A botnet comprised of about 50,000 infected computers has been waging a war against U.S. government Web sites and causing headaches for businesses in the U.S. and South Korea. — The attack started Saturday …
Context & Ripple Effects
The attack follows reports of a botnet spanning nearly 2 million consumer, business and government PCs and a June incident in which 40,000 sites were hit by a PC-compromising attack. Together, those episodes show compromised machines functioning both as victims and as a distributed pool of attack capacity.
A botnet of about 50,000 infected computers has brought that capacity to U.S. government web services while also creating operational problems for businesses in the United States and South Korea. The Washington Post's pickup indicates the incident has crossed from a technical-security story into a national-security frame.
First-order effects
- U.S. government website operators face disrupted public-facing services from traffic generated by roughly 50,000 compromised computers.
- Businesses in the United States and South Korea must contend with spillover from an attack campaign whose infected endpoints are distributed across ordinary networks.
Second-order effects
- Government web operators and their network providers are pushed toward stronger traffic filtering and incident coordination, because blocking individual source machines is ineffective against a botnet.
- Organizations whose PCs are infected become involuntary participants in attacks, raising the operational value of patching and endpoint cleanup alongside perimeter defenses.
Third-order effects
- Repeated large-scale compromises point toward botnets becoming reusable attack infrastructure: security failures at dispersed endpoints can be concentrated against high-visibility public services.
- The pattern shifts cyber defense from protecting a single website to coordinating across endpoint owners, network providers and public-sector operators.
The trend: Botnets are turning widely distributed compromised computers into concentrated attack capacity against public-facing online services.