Press Release: DVB web site hit by DDoS attack

https://teakdoor.com/images/smilies1/You_Rock_Emoticon.gif

Press Release: DVB web site hit by DDoS attack

Jul 25, 2008 (DVB)–The website run by the Oslo-based Democratic Voice of Burma radio and TV station has been hit by a persistent and severe Distributed Denial of Service attack rendering the site mostly inaccessible since 20 July 2008.

DVB was informed by the hosting service provider Rackspace on 20 July that its website had been the target of a DDoS attack but that the volume of data was not large enough to knock down the site. However, with the next couple of hours, the attacker had managed to block the site from the Internet.

According to the hosting company, the amount of data flooding onto the DVB web site was well over one gigabyte per second, many times more than the site can handle.

A DDoS attack is a malicious attempt to disable a website, including by overwhelming the site with information requests so that it cannot respond to regular traffic.

“The attacker is obviously trying to shut down DVB's website from the internet as the attack has been getting more severe and persistent over the last four days. And we are still under attack,” said Khin Maung Win, deputy executive director of DVB.

DVB is an independent multi-media organisation focusing on Burma. It broadcasts two hours of short-wave radio and one hour of TV into Burma on a daily basis.

DVB's website is one the main information sources for those who are interested in news about Burma and is accessed by at least 10,000 visitors per day.

“Technically, it is of course difficult to say who is behind the attack. But we can easily say that Burmese government is behind this attack,” said Khin Maung Win.

"Apart from them, who else would like to see our Internet site shut down and who else would want to spend a lot of money initiating this kind of attack?”

DVB was a major source of information and TV footage for international media organisations during the Buddhist monk-led demonstrations in September last year and the recent Cyclone Nargis disaster.

“This is another obvious example of the Burmese military regime suppressing media freedom,” Khin Maung Win said.

For more information, please contact:

Khin Maung Win, Deputy Executive Director/Deputy Chief Editor

Email: khinmaungwin[at]mac.com

Mobile phone: +4790800263

english.dvb.no

Why isn't there server just blocking the attacking ips?

Is that the same as why weren't there any torpedo nets when japan attacked PH ?

Quote:

---

Originally Posted by dirtydog

Why isn't there server just blocking the attacking ips?

---

from the Rackspace blog :

The Dirty Work You Never See
by Tom Sands on April 11, 2008

A common problem across the Internet today is malicious activity. Things like: DDoS Attacks, botnets, IP hijacking, viruses, spyware, worms, and phishing make up just some of the things that we deal with on a daily basis.

From a Networking perspective one of the common things that we deal with is DDoS attacks. Basically, this is that act of someone’s website being targeted with the intent of taking it offline. DDoS attacks can come in many forms and vary in effectiveness, including: SYN floods, ICMP/UDP floods, amplification or reflective attacks, and bulk data to just name a few.

In my years here at Rackspace there has been a great deal of change in the methods and mentalities used to perform attacks, from spoofing IP’s and bulk data to try and just max out someone’s connectivity, to much more precise attacks against applications. Because of this, the detection of attacks can become a lot more complicated, where you are no longer just looking for large spikes in traffic, receiving threshold alerts with SNMP, or traffic anomalies via Netflow. Attacks today can be very small in size, slipping under the radar of some systems, and still be affective at crippling a website.

Rackspace’s internal systems provide alerting to over 200 anomalous events per week that require investigation. These events are detected both inbound and outbound of the Rackspace network. This gives Rackspace the ability to proactively detect and alert customers of events like: DDoS attacks, and compromised servers.

In addition to these internal alerts, Rackspace also participates in several industry security groups to receive additional notifications of anomalous and potentially malicious activity, and the coordination and communication of some DDoS activity. The combination of these tools and resources greatly improve the ability to detect and mitigate compromised servers and malicious activity within the Rackspace network in a very timely manner.

We pay great attention to running a safe and clean network for customers, and being a very Internet “friendly” hosting company.

rackspace.com

Every server suffers ddos attacks, you just block the ips, can't understand why rackspace doesn't do that, you don't let a ddos attack of 1gb a second to carry on for days.

Mizzima website under attack
Mizzima News Tuesday, 29 July 2008

New Delhi — The Burmese website of Mizzima News, a Burmese Independent News Agency based in New Delhi, has come under persistent and severe Distributed Denial of Services attack causing the website to become inaccessible since Sunday.

The DDoS attacks flood the communication channel of Mizzima's servers with data up to the extent that the site can no longer handle.

According the Mizzima's webmaster, a DDoS attack is an attempt to disable a website, by overwhelming the site with information requests so that it cannot respond to regular traffic.

Mizzima website received more than five Gigabytes of data in less than 15 minutes, many times more than it usually receive, said the webmaster adding that the enormous amount of information received is more than the site can handle.

While, technically, the origin of the attack is impossible to trace, Mizzima's friend, a technocrat who monitors the site, said the attack is clearly targeted.

He said, while this is not the first attempt, there had been plenty of attempts t intrusion from servers in China, Russia and Hungary. At least 30 servers are involved in the case of the attack on the Mizzima Burmese website, he added.

Mizzima News Agency, run by Burmese journalists, is an independent Burmese multi-media group focusing on Burma and related news and issues, and maintains four different websites – Mizzima.com, Mizzimaburmese.com, Mizzima.tv, mizzimaphoto.com.

Besides updated daily news both in English and Burmese, Mizzima also Podcast video stories on its mizzima.tv site, which are frequently picked up by other news organizations.

Both Mizzima's Burmese and English site normally attract an average of 10,000 to 15,000 unique visitors per day but the readership suddenly jumped to hundred thousands during the September protests in Burma last year and in the month of May and June 2008, following the killer Cyclone Nargis' hitting the country.

While it is difficult to determine who is behind the recent attack, with intrusion attempts coming from servers in China, Russia, Hungary, the Burmese military junta, which has several of its technocrats and engineers studying in these countries, could be behind the attack.

Burma's military rulers have banned Mizzima's sites in Burma and bypassing the government's internet filtering systems with the use of proxy and browsing the Mizzima's sites, if caught, could lead to users paying a heavy penalty.

Mizzima, however, is not the only Burmese news organization to have recently suffered such attacks. The Oslo based Democratic Voice of Burma's website also came under similar attack since July 20.

In a statement released on Friday, the DVB deputy executive director, Khin Maung Win said the attacker is trying to shut-down the DVB's site from the internet as the attack has been getting more severe and persistent over the last four days.

"And we are still under attack," said Khin Maung Win.

"Technically, it is of course difficult to say who is behind the attack. But we can easily say that Burmese government is behind this attack," Khin Maung Win said.

mizzima.com

...............................................


and I came across this also .................

Junta Approves Investment in Cyber City

Meanwhile, the Burmese military regime approved www.khitlunge.com.mm, a Web site launched by ITCS to spread government propaganda and counter media attacks by exiled Burmese media groups.

irrawaddy.org

Quote:

---

Originally Posted by dirtydog

Every server suffers ddos attacks, you just block the ips, can't understand why rackspace doesn't do that, you don't let a ddos attack of 1gb a second to carry on for days.

---

Because the IP's are not be consistent. One way of doing a DDoS is to get lots of slave machines to send requests to single server. That way the source IP's will be those of the host machines. This kind of attacks is done by spreading a virus which does not affect the host directly, but bombards the target with requests of various sorts. This is why it's call a Distributed DoS - the source IP's are distributed all over the net.

DVB hit by DDoS attack

The Democratic Voice of Burma website has again been hit by a severe Distributed Denial of Service attack, rendering it inaccessible since the morning of 17 September.

Access to the site may be sporadic over the next few days while the problem is being tackled.

A DDoS attack is a malicious attempt to disable a website, including by overwhelming the site with information requests so that it cannot respond to regular traffic.

DVB was targeted in a similar attack in July this year.

We are working to restore normal service as soon as possible and we thank our readers for their patience.

english.dvb.no


.................................................


Dear Irrawaddy readers

We regret to inform you that the Irrawaddy Web site has been disabled since yesterday due to an attack that has also targeted a number of other exiled Burmese media groups.

This afternoon, our technical staff confirmed that our IP address has been blocked by a distributed denial-of-service (DDoS) attack. Our technicians are now working to fix the problem.

Tomorrow is the first anniversary of the monk-led uprising known as the "Saffron Revolution." We have received reports that Internet speeds in Burma have been very slow since yesterday, suggesting that there has been a concerted effort to prevent information from going into or out of the country.

We hope to be able to restore full service as soon as possible and will keep you informed of any further developments.

The Irrawaddy

* www.irrawaddymedia.com is a mirror site of www.irrawaddy.org

irrawaddy.org

http://theirrawaddy.blogspot.com/

On Tuesday, we received reports that the Internet in Burma was running slowly, suggesting a concerted effort to prevent information from going in or out of the country.

Then on Wednesday, our colleagues and subscribers in the US, Japan and Malaysia notified our Thailand-based office that they were unable to access our Web site.

A few hours later, I-NET, the largest host server in Thailand, confirmed: “Your site has been under distributed denial-of-service (DDoS) attack since around 5pm.”

I-NET finally decided to shut down our server.

Singlehop, which hosts The Irrawaddy’s mirror site, explained: “Your server is under a major attack. Due to the size of the attack our network engineers had to null route the IP to negate it. When the attack has subsided we will remove the null route.”

Singlehop told us that the cyber attack was very sophisticated.

Currently, our Web site is disabled and we have been forced to launch our daily news in blogs. Fellow exiled news agencies Democratic Voice of Burma and New Era were also disabled.


https://teakdoor.com/images/smilies1/You_Rock_Emoticon.gif

theirrawaddy.blogspot.com

Free Image Hosting [xs.to]

See what Toxic's soft loan gave to them?

https://teakdoor.com/images/imported/2008/09/506.jpg


The Generals Go Cyber?
SEPTEMBER 19, 2008
By AUNG ZAW

Burma's military junta has so successfully suppressed the media that Internet sites based outside the country are one of the few remaining sources of reliable news for Burmese people. Now it appears not even those sites are safe. Shortly before yesterday's anniversary of the 1988 pro-democracy uprising and last year's Buddhist-monk-led Saffron Revolution, the Web sites of my newspaper, The Irrawaddy, and other Burmese news portals came under cyber attack. I am not alone in believing that the junta is behind the attack, just as it was behind the shutdown of Internet access in Burma during last year's uprising.

On Tuesday, we received reports from our stringers and regular readers that Internet connections in Burma were running slowly. The number of these reports suggested a concerted effort to prevent information from going in or out of the country in the run-up to yesterday's important anniversary. The next day, our colleagues and subscribers in the United States, Japan and Malaysia notified our Thailand-based office that they were unable to access our Web site, www.irrawaddy.org.

A few hours later, inet, the largest Internet host server in Thailand and the primary host of our site, confirmed our site had been under a "distributed denial of service" attack since 5 p.m. that day. Someone had managed to freeze our site by bombarding us with so much traffic that our server couldn't cope. Inet finally decided to shut down our server.

The attackers also targeted our "mirror site," which handles overflow traffic whenever our primary host is unavailable. Singlehop, the server for our mirror site, told us the attack was forcing it to shut down our site, too. The company told us the attack had been "very sophisticated." The attacks on both our primary and our mirror sites are continuing.

Nor are we alone. Fellow exile news agencies Democratic Voice of Burma and New Era were also disabled in similar attacks. We have been forced to publish our daily news via a temporary blog we've created, theirrawaddy.blogspot.com.

The attack on our Web sites is persistent and believed to be manually launched from various locations, which according to our Web hosts means it's the work of a large group of hackers. Cyber criminals, widely dispersed around the globe, can be bought for as little as $500 a day. We've been able to trace one source of the current attack to a computer connecting to the Internet in the Netherlands. Burma may have local cyber criminals too. In recent years the regime has sent students -- mostly from the army -- to Russia for study that many believe includes training in cyber warfare.

As for the motive, that's not a mystery either. Exiled media groups like the journalists at The Irrawaddy, bloggers, reporters inside Burma and citizen journalists played major roles last September in highlighting the brutal suppression of the monks and their supporters in the streets of Rangoon. Live images, eyewitness reports, updates and photographs landed on our desks every few seconds.

Through us and others like us, the outside world was able to witness the terror of the Burmese regime on television and on the Internet. And so the military regime struck back. On Sept. 27 last year, all connections to the Internet inside Burma were closed down for four days as the authorities tried to conceal their crimes.

This latest act of apparent sabotage comes in a broader climate of Internet and media repression. In Burma, some Internet cafes require users to provide identification before logging on so the government can track Internet usage. In other cafes, informers observe students playing video games and Buddhist monks complain they are treated like criminals if they ask to use the Internet.

Meantime, reporters, editors and publishers based in Rangoon are under increasing pressure. Earlier this month, police apprehended a group of reporters and charged them with working for The Irrawaddy, though they were not. Our stringers say they are nervous, though fortunately they remain undetected. My friend, a foreign journalist who recently left Burma, said that the mood was very tense. "It is hard for our Burmese colleagues to report," she said. "But they are very brave."

In this increasing climate of fear where Internet users are frequently suspected of working for exiled media, people in Burma are naturally afraid to communicate. The Internet is one of the few remaining opportunities they have to do so, especially with the outside world.

Over the past 20 years, the battle between Burma's regime and pro-democratic forces has shifted from the streets to the jungle and now to the computer. The generals will not give in; rather, they will equip themselves and become more sophisticated. The attack on our site appears to be a sign of this trend.

However, the junta is mistaken if it thinks we will give up. We at The Irrawaddy have to build stronger firewalls and more effective systems to prevent future attacks. Ultimately, the flow of information is unstoppable.

The Burmese regime's cyber criminals cannot penetrate the strongest firewall of all -- the spirit of desire for change.

Mr. Aung Zaw is founder and editor of The Irrawaddy magazine.

online.wsj.com

By the bullet or the ballot they say. It's time that the generals and their families experience fear I say. They and their families shouldn't feel safe anywhere outside of their homes. That government is like the North Korean government; it will never give their people freedom. Violence looks like the only option for freedom there. Whoe would want to be a slave forever?

Quote:

---

Violence looks like the only option for freedom there.

---

a call that is getting noticeably louder ..........:(

Burma junta launches 'crippling' cyber attack
By Ed Cropley in Bangkok
September 19, 2008

snip

The DVB attacks, which also started on Wednesday, appeared to come from sites in Russia and China, Toe Zaw Latt said, corroborating reports of the junta getting internet training from Beijing and Moscow, its main diplomatic backers.

The internet inside Burma had also been running even slower than its normal snail's pace this week and internet cafes had come under unusually tight surveillance, the Irrawaddy said, suggesting junta unease at the protest anniversary.

Security was also tight on the streets of Rangoon, with some vehicle checkpoints, one diplomat said.

The protests started in August 2007 with small demonstrations against declining living standards, but soon sucked in the revered Buddhist monkhood and snowballed into the biggest challenge to military rule since a 1988 uprising.

Most the organisers of the initial marches, members of the "88 Generation Students" who survived the brutally crushed 1988 revolt, were arrested a year ago and have been behind bars ever since.

As such, any repeat outbreak of dissent looks extremely unlikely. Other underground democracy activists were keeping their powder dry for a general election slated for 2010 and could not afford to get arrested, Toe Zaw Latt said.

"They have to keep their strength for bigger events," he said.

news.com.au


Russia and China .............:(

.

The Irrawaddy Hopes to Defeat the Hackers Soon
By SAW YAN NAING
Friday, September 19, 2008

The online news service of The Irrawaddy remained paralyzed by a cyber attack on Friday, although technicians expressed optimism that it would be back in operation by Monday.

Three other Burmese exile news operations that also fell victim to the attack restored their services on Friday, leading to hope that The Irrawaddy Web site would also soon be again accessible.

The attack knocked out The Irrawaddy service on Tuesday and also struck the Oslo-based Democratic Voice of Burma and the New Era Journal, based in Bangkok. All were intermittently put out of action.

The three opposition news services, operated by Burmese exiles, were hit by a “distributed denial-of-service”, or DDoS.

A DDoS attack creates a “traffic jam” at the entry to a Web site as masses of fake, robot “visitors” try to access it.

INET, the second largest host server in Thailand, confirmed that The Irrawaddy Web site, www.irrawaddy.org, had been disabled by a DDoS attack since September 17, the day before the 20th anniversary of the mass anti-government demonstrations in Rangoon on September 18.

The CAT Telecom Public Co. Ltd and some ISPs blocked The Irrawaddy Web site as a “danger zone.”

One consultant, who requested anonymity, said: “Usually, it only impacts the targeted Web site, but it is possible that Internet infrastructure will be affected on a wider scale when many Web sites are under attack at the same time on the same national network.”

The Irrawaddy’s “mirror site,” The Irrawaddy News Magazine [Covering Burma and Southeast Asia], was also disabled by DDoS.

Rangoon visitors to The Irrawaddy Web site reported on Friday that they could access it by setting new proxy servers.

A DDoS attack is orchestrated by an aggressor hiring a hacker who claims the power to control thousands of PCs around the world with the ability of using them to attack a Web site. Fees for the services of the hacker vary according to the size and duration of the attack, but usually start at around US $500, according to one technician.

Win Thu, The Irrawaddy’s office manager, who also oversees its technical team, said the attack that struck the company’s Web site appeared to have been targeted by such a hacker. The nature of DDoS made it likely that the attack would be limited in duration, he said.

Aye Chan Naing, DVB’s chief editor, said his organization received several phone calls and anonymous e-mails two months ago, claiming cyber attackers were Burmese technicians who had trained in Russia.

“The Burmese authorities want to block the flow of information to the outside world,” he said. “But I don’t think they can do it for a long time.”

Exiled media groups, bloggers, reporters inside Burma and citizen journalists played major roles in the reporting on the Buddhist monk-led uprising in September 2007, highlighting the brutal suppression of the monks and their supporters in the streets of Rangoon.

Recently, the regime has tightened its watch over Internet cafes in Rangoon. In some Internet cafes, users have to show their ID, while informers observe students playing video games. Buddhist monks complain that they are treated like criminals if they are seen using the Internet.

irrawaddymedia.com

Web Sites Back Online, but Fears of Further Attacks Remain
By MIN LWIN
Monday, September 22, 2008

The online version of The Irrawaddy and other Web sites run by Burmese exiles are back in operation after being hit last Tuesday by “distributed denial-of-service,” or DDoS, attacks that jammed the sites with fake traffic.

Attacks on the Irrawaddy Web site stopped on Friday evening, according to office manager Win Thu, who supervised efforts to restore service. A mirror site, The Irrawaddy News Magazine [Covering Burma and Southeast Asia], has been available since Saturday evening, and the main site, The Irrawaddy News Magazine [Covering Burma and Southeast Asia], went back online on Monday. He added that additional mirror sites would be created as a measure to deal with any future attacks.

“I am not sure if another attack will hit our site or not,” he said. “If the Burmese military government has well-trained computer technicians, the exiled media may be targeted again, because it doesn’t cost very much to carry out such attacks.”

At least two other exiled media Web sites were affected by last week’s attacks. The Oslo-based Democratic Voice of Burma and Khit Pyaing (The New Era Journal), based in Bangkok, have both been restored to full service.

This is the second time that The Irrawaddy’s Web site has been hit by a cyber attack since it was established in 2000.

The first time occurred almost exactly one year ago, when a Trojan virus infected the site at the height of monk-led protests against military rule in Burma in September 2007. The Irrawaddy Web site reported extensively on the demonstrations and posted numerous images and videos provided by so-called “citizen journalists” inside the country.

Like last year’s attack, the latest attempt to shut down exiled media Web sites was accompanied by a slowdown of Internet service inside Burma.

According to Internet café owners and users in Rangoon, Internet speeds have slowed down considerably since last week, making it impossible to upload large files such as photos or videos. There were also reports of connections stopping and restarting every ten minutes or so on Friday and Saturday.

Sources in Rangoon have also reported increased surveillance of Internet cafes. The owner of one Internet café in downtown Rangoon said that local authorities and police intelligence officers had issued orders to provide Internet users’ ID information.

“The authorities ordered us to register user ID numbers, addresses and phone numbers,” he said.

Internet cafes are also required to send each user’s Web history to the state-run Internet service provider (ISP) Myanmar Info-tech every two weeks. They are also instructed to automatically capture screenshots showing users’ online activities every five minutes.

Despite the tightening of restrictions on access to the Internet, the Burmese regime has recently moved to expand Internet service in the country.

Hanthawaddy National Gateway, Burma’s newest ISP, was launched in July and is expected to become the largest in the country, according to a senior member of the Myanmar Computer Professionals Association.

The new ISP will provide access to subscribers in every state and division except Rangoon Division, but at present is only available to military officials, he added.

Hanthawaddy National Gateway received technical assistance from Alcatel Shanghai Bell Company, which is represented in Burma by Tay Za, one of the country’s wealthiest businessmen and a close associate of senior leaders of the ruling junta.

The source said that Hanthawaddy National Gateway is to be linked to the Yadanabon teleport in Mandalay and also to a regional ISP in Hong Kong.

Burma currently has three ISPs—the state-run Myanmar Posts and Telecommunications (MPT), which operates Myanmar Info-tech; the semi-government-owned Myanmar Teleport (formerly Bagan Net); and Hanthawaddy National Gateway.

irrawaddy.org

Mizzima websites hacked
by Mungpi
Wednesday, 01 October 2008

New Delhi – The websites of Mizzima News, an independent Burmese news agency based in New Delhi, India, has been hacked with a Cross-site scripting causing the webites to be inaccessible since early Wednesday morning. According to Mizzima's webmaster the attackers used the vulnerability in poor-code websites, and took total control of the site. While files from the English and Burmese website were deleted from the database, and had to be recovered from the back-up, the MizzimaTV and Mizzima Photo - Home were temporarily down.

But within hours, the problems with the Welcome to the Mizzima News, MizzimaTV and mizimaphoto.com were rectified. However, the Burmese site – Index of / remains inaccessible.

Though it is not known, who is behind the attack, the hacker's internet protocol (IP) is found to have originated from a server in the United States.

Mizzima, however, is still unable to confirm whether the attack is the work of the Burmese military junta, which has banned Mizzima's websites inside the country. Web users bypassing the government's internet filtering systems with the help of proxy and browsing can access Mizzima's sites. But if caught, they would have to pay a heavy penalty.

"It is hard to tell who is behind the attack but someone who has special interest could be the culprit or culprits," said Sein Win, Managing Editor of the Mizzima News.

"However, these people should know that this is a criminal offence" he added.

This is not the first time, however, that the websites of Mizzima as well as other Burmese media groups in exile, including the Chiang Mai based Irrawaddy, Oslo based Democratic Voice of Burma and Bangkok based New Era Journal, have been attacked.

In July, the Burmese website of Mizzima News and the DVB came under a Distributed Denial of Services (DDoS), causing the sites to become inaccessible for several days.

Similarly, on September 24, a day before the first anniversary of last year's monk-led protests in Burma, three Burmese News agencies The Irrawaddy, DVB and New Era Journal in exile came under a DDoS attack.

Mizzima News Agency, run by Burmese journalists, is an independent Burmese multi-media group focusing on Burma and related news and issues, and has four different websites – Mizzima.com, Mizzimaburmese.com, Mizzima.tv, Mizzima Photo - Home.

Besides updated daily news both in English and Burmese, Mizzima also Podcasts video stories on its MizzimaTV site, which are frequently picked up by other news organizations.

Both Mizzima's Burmese and English site normally attract an average of 10,000 to 15,000 unique visitors per day but the readership suddenly jumped to hundreds of thousands during the September protests in Burma last year and in the month of May and June 2008, following the killer Cyclone Nargis' lashing the country.

mizzima.com

memo to top junta dog ,

it's like taking on a wasps nest with a stick ..................https://teakdoor.com/images/smilies1/You_Rock_Emoticon.gif


How to shoot down Than Shwe - published

https://teakdoor.com/images/imported/2008/10/43.jpg

(Click picture to Play the Game)

ko-htike.blogspot.com

.................................................. ............

Hack attempts suspend Mizzima websites
by Mungpi Friday, 10 October 2008

New Delhi - The websites of Mizzima News, an independent Burmese multi-media group based in New Delhi, have been crippled since Thursday evening because of suspension by its hosting server due to the site attracting several hacking attempts.

Mizzima' Canada-based hosting company, Hostpapa.ca, said it has suspended the sites – mizzima.com, mizimaburmese.com, mizzima.tv, and mizzimaphoto.com – after the sites attracted several hacking attempts and as it fears such attacks might also harm other sites on the server.

According to Mizzima's technical staff, the hacking attempt is very sophisticated, well-timed and organized. The hacking file used has more than 4,000 lines of code and is adapted from a popular PHP Shell script.

"Unfortunately to protect the servers and the other customers on your server we had to suspend your account," Hostpapa's technical support staff relayed in its notice to Mizzima.

While it is still difficult to technically trace who is behind the hacking attempts, Mizzima's technical staff said the main attempt is found to have originated from Russia with cooperation from other hackers in Germany, France and India.

"This sort of well-organized attacking can't be done by individuals but must instead be the disguised actions of an institution, most probably in this case the military regime could be behind the scene," Sein Win, Mizzima's Managing Editor said.

Burma's military junta, which has several of its technocrats training in several IT-related fields in Russia and other parts of the world, has imposed a ban on Mizzima's websites inside the country.

Though web users could still access the Mizzima sites by bypassing the government's Internet filtering systems through the help of proxy servers and browsing, the junta has made it an offense to surf the site and users who do could find themselves paying a heavy penalty if caught.

The junta has constantly blamed exile media groups as well as foreign broadcasting radio stations for producing information that reveals human rights violations inside Burma as well as the continued mismanagement of the country.

In its campaign against foreign broadcasting stations after the September 2007 protests, the junta, in its mouthpiece New Light of Myanmar, carried slogans that stated: "Skyful of liars attempting to destroy nation, BBC lying, VOA deceiving, RFA setting up hostilities. Beware don't be bought by those ill-wishers," referring to the services of the UK's British Broadcasting Corporation, US's Voice of America and Radio Free Asia.

This is the second instance in which Mizzima's sites have been the target of hackers. In July, Mizzima websites were crippled due to a Distributed Denial of Service (DDoS). Mizzima, however, was not alone in suffering such attacks.

Also in July, the website of the Oslo-based Democratic Voice of Burma (DVB) suffered a similar DDoS attack, while in September DVB along with two other websites of exile Burmese media groups – the Chiang Mai-based Irrawaddy and Bangkok-based New Era Journal – came under the crosshairs of a DDoS attack, causing inaccessibility to their sites on September 24th, two days before the crack-down on last September's protests.

"Mizzima is serving the people. We should all work together to sue or to crack-down against these criminals," Sein Win said.

Mizzima News Agency, run by Burmese journalists, is an independent Burmese multi-media group focusing on Burma and Burma-related news and issues, and maintains four different websites - mizzima.com, mizzimaburmese.com, mizzima.tv and mizzimaphoto.com.

Besides offering updated daily news both in English and Burmese, Mizzima also podcasts video stories on its mizzima.tv site, stories which are frequently picked up by other news organizations.

Mizzima, as a member of the international media watchdog International Freedom of Expression eXchange (IFEX), and as partner of the regional media watchdog Southeast Asian Press Alliance (SEAPA), has been producing media alerts on the violations of freedom of expression and press in Burma for over a decade.

Both Mizzima's Burmese and English sites normally attract an average of 10,000 to 15,000 unique visitors per day, but the readership suddenly jumped to hundreds of thousands during the September 2007 protests in Burma and in May and June 2008, following the devastation caused by Cyclone Nargis.

mizzima.com

Cyber Attack Shuts Down Irrawaddy Websites
Monday, September 27, 2010

The websites of The Irrawaddy were under attack on Monday morning, shutting down its English and Burmese online editions. We are now working to restore service to our readers worldwide.

The attack also shut down the website of the editor, Aung Zaw (www.aungzaw.net).

The attack came on the third anniversary of the Saffron Revolution, the monk-led demonstrations in 2007.

According to an e-mail sent by the website host in the US to The Irrawaddy webmaster team, the website was attacked in a high volume attack which overloaded its capacity to provide service. The attack is called a Distributed Denial of Service (DDoS) attack.

A DDoS attack is defined as an attack in which a multitude of compromised systems attack a single target, thereby causing denial of service for users of the targeted system. A flood of incoming messages to the target system essentially forces it to shut down, thereby denying service to the system by legitimate users.

In September 2008, the website was also attacked by a DDoS attack. The volume of the DDoS attack on Monday was 2 gigabytes, one gigabyte larger than the attack in Sept. 2008, according to Win Thu, the general manager of The Irrawaddy.

Win Thu said that the attack would be short-term, but it has disrupted the daily news production and access by our readers.

Hackers began the attack on the English and Burmese website address: The Irrawaddy news magazine, Burma, Myanmar, Southeast Asia at 1 a.m on Monday and later attacked The Irrawaddy's mirror website: www.irrawaddymedia.com.

The Irrawaddy web team is now trying to recover the websites. In 2008, it took three days to recover the website, according to technicians.

Two other Burmese news websites, Mizzima and the Democratic Voice of Burma (DVB), were also attacked on Monday.

The Irrawaddy, DVB, Mizzima and a fourth site, Khitpyaing, were all attacked by DDoS in September 2008, on the anniversary of the Saffron Revolution.

irrawaddy.org

I guess the culprit is supposed to be China as doubtful Burma would have the expertise. In any event they're right about RFA.. it's an American State-Dept sponsored anti-left hate-spin machine without question - VOA too, though a bit 'softer' and with more journalistic freedoms. Still you'll never see a story about pro-Lula or pro-Chavez developmental initiatives there either. Burma is an easy hit as it clearly is way off the rails..

Majority of Cyber Attacks Came from Chinese IP Addresses
Tuesday, September 28, 2010

The well-organized, massive cyber attacks that shut down The Irrawaddy on Monday came largely from Chinese internet provider addresses.

Win Thu, the general manager of The Irrawaddy magazine, said that the majority of the cyber attacks on The Irrawaddy came through China with a lower number from the US and Australia. Other attacks on exiled media came through at least nine different countries including the US.

The origin of the attacks is not know. The Irrawaddy restored website services on Tuesday.

Three websites operated by The Irrawaddy along with websites operated by Mizzima and the Democratic Voice of Burma (DVB) were shut down on Monday. The ongoing attacks—called a Distributed Denial of Service (DdoS) attack—were more powerful than when The Irrawaddy was attacked in 2008. The attacks coincided with the anniversary of the Saffron Revolution in 2007.

According to a message sent by The Irrawaddy’s website host in the US, the volume of the DDoS attack on The Irrawaddy was 4 gigabytes, 3 gigabytes larger than the attack in September 2008, said Win Thu.

Aung Zaw, the editor and director of The Irrawaddy, said, “The attack was politically motivated so we need to be well-prepared. The attack this time was far more serious. Cyber mercenary hackers are more sophisticated now.”

Two weeks ago, unknown hackers who called themselves “Burmese hackers,” visited to The Irrawaddy on-line store and left crude messages directed at The Irrawaddy.

One message said: “Due to the unstable political situation and for the good of national reconciliation, we declare cyber war on all government and opposition groups.”

A DDoS attack is defined as an attack in which a multitude of compromised systems attack a single target, thereby causing denial of service for users of the targeted system. A flood of incoming messages to the target system essentially forces it to shut down, thereby denying service to the system by legitimate users.

Websites operated by DVB, The Irrawaddy, Mizzima and Khitpyaing were all attacked by DDoS attacks in September 2008.

Toe Zaw Latt, the DVB bureau chief, said, “I think they [attackers] are preparing for the general election. They are now testing it. They may systemically operate the cyber attacks during the elections.”

The attack on the DVB website was about 120 megabytes per second. The attackers’ IP addresses came from Russia, Georgia, Israel, Kazakhstan, Ukarine and Vietnam, Toe Zaw Latt said.

The Mizzima attack was six gigabytes and the source of the attacks came from China, Russia, the US and Turkey, said Sein Win, the managing editor. He said the cyber attackers uploaded one million visitors to overload the Mizzima website.

Burmese journalists in exile have raised concerns about Internet restrictions in Burma as the Nov. 7 general election nears. The government has banned foreign election observers, and it has restricted visas to Westerners who try to enter the country.

irrawaddy.org

Scale of cyber attacks ‘rare and serious’
FRANCIS WADE
29 September 2010

https://teakdoor.com/images/smilies1/You_Rock_Emoticon.gif
Location of top 20 sources for 20 Sept attack on DVB, with the main source being Georgia
(DVB)

A series of cyber attacks this week on websites belonging to exiled Burmese media have gained strength, with a second, and far more intense, assault yesterday hitting DVB.

Speculation as to the timing of the DDoS, or distributed denial-of-service, attacks – which began on 27 September on the three-year anniversary of Burma’s 2007 monk-led uprising – has in fact centred on the looming elections. Media workers believe the Burmese junta is carrying out a test run, and fear more attacks are on the way.

At around 7.30pm UTC yesterday, an attack of 4.5 Gbps (Gigabytes-per-second) – or 30 times larger than Monday’s attack – hit the DVB website. The attackers also targeted the infrastructure of DVB’s carrier in Norway.

The attack is technically known as a ‘RESET flood attack’, better described as a “denial of voice” attack, according to a Europe-based cyber-security expert who asked to remain anonymous. He added that the attackers “are taking advantage of legal havens”, and that its persistence and scale “is rare and serious”.

Two other exiled Burmese websites belonging to The Irrawaddy and Mizzima have also been brought down. The Irrawaddy claimed yesterday that its attack had originated from China Telecom. A seperate, but less serious, attack on the DVB website on 20 September used equipment in Russia, Georgia, Vietnam, Israel and Kazakhstan, amongst others.

Speaking to DVB today, The Irrawaddy’s editor-in-chief, Aung Zaw, said that its attack has now been suspended but a new one “could be imminent”.

“We’ve been trying to move to a new server – the Burmese intelligence knows we are a vulnerable website so they can come and attack us at any time,” he said, adding that its origin in China Telecom “doesn’t surprise me, but I don’t think Chinese officials are involved”.

Cyber-criminals are known to build their own attack infrastructure, or otherwise hire one, meaning that top-level Chinese officials may be unaware of their existence in the country.

The attacks bode ill for the looming elections in Burma – the ruling generals fired a warning shot for media earlier this month when they stopped the visa-on-arrival scheme, widely believed to be a ploy to keep journalists and observers out of the country during the polls.

Aung Zaw said there were “major concerns” about media security during the elections, adding that “the regime wants to silence all information pipelines”. It has already banned election monitors from entering, while critics have derided the polls as a sham aimed at cementing military rule.

Burma already has some of the world’s most draconian media laws, and ranked 171 out of 175 countries in the Reporters San Frontieres (RSF) Press Freedom Index for 2010. Out of the 2,150-plus political prisoners in Burma, around 15 are journalists, and the New York-based Committee to Protect Journalists (CPJ) last year branded Burma “the worst country to be a blogger”.

dvb.no

The Irrawaddy isn't loading for me :(

anyone else have problems ?

The Irrawaddy news magazine, Burma, Myanmar, Southeast Asia

^ok here mid. Loads now.

thanxs

https://teakdoor.com/images/smilies1/You_Rock_Emoticon.gif
https://teakdoor.com/images/imported/2010/11/57.jpg

Our website has been facing huge DDOS attack for the past 24hrs because of which it may be extremely slow or you may see "Server Too Busy" error. We are working with our network service provider and we hope to resolve this issue soon. Please click here to continue.
Thank You!