Feedly Knocked Offline by DDoS Attack after refusing extortion demands

Feedly is a very popular RSS feed service which is available for desktop, iOS and Android devices with around 15 million users and 24,000 paying customers. It is also integrated into hundreds of other third party apps, which offers its users to browse the content of their favorite blogs, magazines, websites and more at one place via RSS feed subscriptions.

Feedly gained its popularity after Google announced the closure of its Google reader service last year. A huge number of RSS Google reader users switched to Feedly. Its popularity and reputation attracts RSS die-hards and cyber-criminals as well.

A San Francisco-based firm confirmed that some bad actors had launched a DDoS attack on its popular site, and were demanding a ransom money to restore the service. But the company refused to pay the amount to criminals which is really a matter of appreciation.

“We refused to give in and are working with our network providers to mitigate the attack as best as we can, ” said Edwin Khodabakchian. He added, “We are working in parallel with other victims of the same group and with law enforcement.”

For those who are not familiar, a Distributed Denial-of-Service (DDoS) attack is one in which multiple compromised systems attacks a single target system or service to make it unavailable to its intended users. The flood of incoming requests essentially forces the target system or service to shut down, thereby denying service to the system to its legitimate users.

According to the company, the hackers have compromised Feedly’s network resources, but they haven’t gained access to any of its servers, ensuring its users that their data is safe.

At the time of writing, the website was still unavailable with visitors greeted by error messages including ‘408 Request Timeout‘ and ‘Error 502 Timeout‘. But latter, the website informed its users that there is no issue with their browser or the website’s CloudFlare content delivery network, whereas the host domain was unreachable at the time.

After few hours of the attack confirmation, Feedly said it had made some changes to its infrastructure on bringing the website online again. “However, these things take some time to put into place and it may still be a few more hours before service is restored,” the company said. “Thank you so much for your patience and for sticking with us.“

The popular online notes and web clippings service Evernote suffered a similar attack. It is not yet known whether the two are linked, but Feedly and Evernote work closely together.

DDoS attackers have discovered more powerful ways to attack a web service by exploiting Internet protocols such as DNS, NTP and even SNMP which allow cybercriminals to carry out record breaking DDoS attacks with the use of a little skill and relatively small amount of resources.

Feedly has set up an example for all of us that its really not right to pay the ransom to the bad actors and if you fulfill their demands, you are doing nothing but encouraging them more to carry out more such attacks against you.

Israel develops wireless-malware-injection-by-smartmobe tool

It's not the next Daniel Suarez plot; Israeli academics have developed software they say can use your mobile phone to detect electrical impulses, and foist malware to computers physically disconnected from any internet facing network.
Ben Gurion University professor Yuval Elovici told The Times of Israel that his team successfully sucked data off an air-gapped machine by implanting malware using the method.
He said the attack works up to six metres away from a targeted machine.
The attack resembles the National Security Agency's TEMPEST program which revealed how cashed-up agencies could sniff data leaked in electromagnetic frequencies.
The scenario outlined in the authors' research required an application installed on a victim's phone to build a network connection using FM frequencies. Malware could then be foisted onto the targeted machine.
The research is of interest because Stuxnet, the code detected in 2010 that destroyed centrifuges in Iran's Natanz uranium enrichment facility, had to cross an air gap.
US officials and NSA document leaker Edward Snowden have said the malware was the brainchild of America and Israel. News of an Israeli air-gap-breaching technique is therefore something of an eyebrow-raiser.
Various shielding technologies exist to guard against attacks over the airwaves, but the researchers said there was little to be done to close off their threat vector other than banning phones from specific areas.
The attack followed the bizarre and controversial discovery of the attack dubbed BadBIOS which saw malware apparently flung over air gaps using high-frequency transmissions between speakers and microphones.