online gaming and the growing impact of china ddos - david liebenberg
TRANSCRIPT
![Page 1: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/1.jpg)
David Liebenberg CiscoTalos
![Page 2: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/2.jpg)
Online Gaming and the Growing Impact of China
DDoS
![Page 3: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/3.jpg)
Agenda
1. OnlinegaminginChina
2. TheDDoSa5ackindustryanditsconnec<ontoonlinegaming
3. Casestudy:SSHPsychosandChinaZ
4. IndicatorsthatDDoSa5acker/malwareisconnectedtoonlinegaming
5. ConclusionsandQ&A
![Page 4: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/4.jpg)
Online Gaming Industry
Top10OnlineGamesinChina
![Page 5: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/5.jpg)
Pirated Game Industry
• Piratedgameserver=sifu, 私服
• Profitabilityandcrowdedmarketplacecreatefiercecompe<<on
• Bo5omline:bigbusinesswithli5leethicalrestraint
![Page 6: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/6.jpg)
DDoS AAacks Take out Rivals
![Page 7: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/7.jpg)
![Page 8: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/8.jpg)
How It Works:
ToolDevelopers
A5ackerRepresenta<vesGamerA GamerB
BotnetOwners
![Page 9: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/9.jpg)
Tool Developers
• ManyChineseDDoStoolscanbedownloadedforfree
• Specializedtoolscostmoneyandareproducedbydedicatedgroups
![Page 10: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/10.jpg)
![Page 11: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/11.jpg)
PlaHorm Rentals
![Page 12: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/12.jpg)
RepresentaIves/AAackers
![Page 13: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/13.jpg)
![Page 14: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/14.jpg)
![Page 15: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/15.jpg)
![Page 16: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/16.jpg)
![Page 17: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/17.jpg)
Case Study Conclusions
![Page 18: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/18.jpg)
Collateral Damage
• AWen’sPu5yDebacle
• Takedownof.cn
• KnightsA5ackingGroup(骑士攻击小组)
![Page 19: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/19.jpg)
Domain Indicators
• Domainnameswiththefollowingle5ercombina<onsfollowedorprecededbyaseriesofnumbersindicateaconnec<ontoonlinegaming:• “gm”–Gamemaster• “my”–Moyu• “sf”–Sifu• “45”–Sifu• “xa”–Xiaoao• “pk”–Playerkill• “cf”–Crossfire• 999–999brand• 3322.org–ChineseDDNSthathostspiratedgames• F3322.org–ChineseDDNSthathostspiratedgames
![Page 20: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/20.jpg)
Chinese Characters
• 私服–Piratedgameserver• 游戏–Games• 接c单–AcceptCCa5acks(Layer7a5acks)• 接d单–AcceptDDoSa5acks• 登录器–Registra<onsoeware• 在线充值 –Replenishyouraccountonline• 抓鸡–Buildabotnet• 鸡肉–Botnet• 传奇–Legendgames• 魔域–Moyu• 火线–Crossfire• 流量 –Traffic• 攻击 –A5ack
![Page 21: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/21.jpg)
Images to Watch:
Gamename Dateposted Wherehosted
Servername
![Page 22: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/22.jpg)
![Page 23: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/23.jpg)
![Page 24: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/24.jpg)
Conclusions
• TheonlinegamingindustryinChinaisconnectedtoDDoSa5acks
• ThereareavarietyofDDoSgroups,offeringa5ackingservicesorsoeware
• Hackerforumsandsocialmediacanbeleveragedforinforma<ononDDoSac<vity
• Language-capableanalystsaddvaluetoinves<ga<ons
![Page 25: Online Gaming and the Growing Impact of China DDoS - David Liebenberg](https://reader034.vdocuments.mx/reader034/viewer/2022051710/5a6599bc7f8b9ab3488b46df/html5/thumbnails/25.jpg)
QuesIons: [email protected]