CIO

WikiLeaks furor spawns rival DDOS battles

Anonymous group launches attacks against Swiss bank for freezing WikiLeaks founder Julian Assange's account

An anonymous, loosely affiliated group that has been responsible for a series of recent Distributed Denial of Service (DDOS) attacks against entertainment industry Web sites over copyright issues, has started attacking organizations viewed as being hostile to WikiLeaks, says a PandaLabs researcher.

The group, dubbed Anonymous, launched a DDOS attack on Monday that knocked Swiss payment transaction firm PostFinance's Web site offline.

The attack was in apparent retaliation for the firm's freezing of an account set up by WikiLeaks founder Julian Assanage, PandaLabs threat researcher Sean-Paul Correll said.

The bank's main Web site was unavailable for several hours but appeared to have been restored by late Monday afternoon.

The attack on PostFinance was preceded by one against PayPal's blog site over the weekend, Correll said. That attack was apparently prompted by PayPal's decision to cut off money services to WikiLeaks last week.

The PayPal attack began at 4.00 a.m PST on Saturday and resulted in the blog being unavailable for a total of more than 8 hours, Correll said.

Meanwhile, anonops.net, a site used by Anonymous to announce their attack plans, came under a massive DDOS attack earlier on Monday, apparently by those opposed to WikiLeaks. In an ironic twist, users attempting to reach the site were being redirected to PostFinance's Website late Monday evening.

A lengthy statement posted on the anonymous group's Web site listed several organizations that the group claimed had stifled WikiLeaks' effort to release the documents. "We will find and will attack those who stand against Wikileaks and we will support WikiLeaks in everything they need," the statement said.

The group said it will offer WikiLeaks an additional site for mirroring the leaked documents. It will also create 'counter-propaganda' and organize DDoS attacks on "various targets related to censorship" the group claimed.

Anonymous' campaign over copyright enforcement issues, Operation:Payback, has resulted in several DDOS attacks being launched against and knocking off sites belonging to the Recording Industry Association of America, the Motion Picture Association of America and others.

In the statement announcing support for Assange, the organizers of Anonymous declared that "Operation:Payback has come out in support of WikiLeaks and has declared war on the entities involved in censoring there information."

The online tussle between those opposed to WikiLeaks' campaign and those supporting it highlights how the Internet is increasingly becoming the battleground for all sorts of causes, Correll said.

"People are starting to figure out they can use technology to fight back," he said. "They have realized they don't have to just stand in a picket line. This has been going on for a few years, but its getting more organized."

WikiLeaks began releasing tens of thousands of classified cables from the U.S. Department of State last Sunday. After a massive DDoS against its French hosting firm rendered the site unavailable for several hours, WikiLeaks quickly moved to Amazon's cloud hosting service last Monday.

Just two days later, Amazon booted WikiLeaks off its servers, forcing WikiLeaks to move its site once again, this time to a Swedish hosting company.