Security News > 2023 > February > Here's a list of proxy IPs to help block KillNet's DDoS bots

A free tool aims is helping organizations defend against KillNet distributed-denial-of-service bots and comes as the US government issued a warning that the Russian cybercrime gang is stepping up its network flooding attacks against hospitals and health clinics.

At current count, the KillNet open proxy IP blocklist lists tens of thousands of proxy IP addresses used by the Russian hacktivists in their network-traffic flooding events.

SecurityScorecard's threat researchers developed the list following their ongoing investigation into Killnet and other network-spamming miscreants.

"DDoS attacks are relatively unsophisticated but can still cause serious damage, especially when they affect hospitals," the security firm wrote in a recent blog about KillNet.

Then in early November, a US Treasury Department official said the agency thwarted a "Pretty low-level" DDoS attack targeting the department's critical infrastructure nodes, also attributed to Killnet.

As HHS warned: "It is likely that pro-Russian ransomware groups or operators, such as those from the defunct Conti group, will heed KillNet's call and provide support. This likely will result in entities KillNet targeted also being hit with ransomware or DDoS attacks as a means of extortion, a tactic several ransomware groups have used."

News URL

https://go.theregister.com/feed/www.theregister.com/2023/02/06/killnet_proxy_ip_list/