Empty DDoS Threats : Meet the Armada Collective

/empty-ddos-threats-meet-the-armada-coll

  • Voici un message de menaces comme nous en recevons tous souvent (cette « Armada Collective » en envoie beaucoup depuis un ou deux mois) :

    De : Armada Collective [mailto:armada.collective@gmail.com]
    Envoyé : vendredi 24 juin 2016 04:51
    À : webmaster
    Objet : ATTENTION: Ransom request!!!

    FORWARD THIS MAIL TO WHOEVER IS IMPORTANT IN YOUR COMPANY AND CAN MAKE
    DECISION!

    We are Armada Collective.

    All your servers will be DDoS-ed starting Sunday (Jun 26 2016) if you don’t
    pay 5 Bitcoins @ 1zeYVoTUBxqQq9KBscjqBnGV7r2oyShRB

    When we say all, we mean all - users will not be able to access sites host
    with you at all.

    If you don’t pay by Sunday, attack will start, price to stop will increase
    by 5 BTC for every day of attack.

    If you report this to media and try to get some free publicity by using our
    name, instead of paying, attack will start permanently and will last for a
    long time.

    This is not a joke.

    Our attacks are extremely powerful - sometimes over 1 Tbps per second. So,
    no cheap protection will help.

    Prevent it all with just 5 BTC @ 1zeYVoTUBxqQq9KBscjqBnGV7r2oyShRB

    Do not reply, we will probably not read. Pay and we will know its you. AND
    YOU WILL NEVER AGAIN HEAR FROM US!

    Bitcoin is anonymous, nobody will ever know you cooperated.

    [Fin du message d’Armada Collective]

    Mais attention, s’il y a des menaces réelles, qu’il faut prendre au sérieux, il y en a d’autres qui sont du pur bluff. CloudFlare a fait un article à ce sujet :

    https://blog.cloudflare.com/empty-ddos-threats-meet-the-armada-collective

    Et le CERT ANSSI aussi : http://www.cert.ssi.gouv.fr/site/CERTFR-2016-ACT-022.pdf

    #sécurité_informatique #dDoS #racket