JP Morgan Chase is recovering from a DDoS attack that knocked it’s website, and online banking offline on Tuesday, making them the latest victim in a wave of DDoS attacks against financial institutions.
Initially, the DDoS prevented access completely for some customers, and then the attack created intermittent outages and connections that were sluggish and slow. Customers were greeted with a notice on Chase.com that simply stated that the site was “temporarily down.” Mobile banking was unaffected by the attack, Chase said.
The bank confirmed the DDoS attack to the media, but would not, or could not disclose technical details such as peak traffic or length of attack. As of Tuesday evening, Chase.com was working as normal.
Earlier this month, a group calling itself Izz ad-Din al-Qassam Cyber Fighters, promised new DDoS attacks against the finance sector, having previously targeted several American banks successfully. At the time their warning was delivered, Bank of America, PNC Bank, Wells Fargo, and Citibank were all having connection issues or were offline entirely.
Earlier this year, a study by the Ponemon Institute said that 64% of IT staffers working within the financial sector said that their banks had suffered at least one DDoS attack within the previous 12 months, and 78% of those respondents said that DDoS attacks will either continue or increase in 2013.
“The belief that traditional perimeter security technologies such as firewalls are able to protect against today’s DDoS attacks is lulling not only financial institutions but organizations across every sector into a false sense of security,” said Marty Meyer, president of Corero Network Security, the company that commissioned the Ponemon study.
“Many Organizations assume traditional firewalls can provide protection against DDoS and zero-Day exploits at the perimeter, yet this is not what they were designed to do and therefore attacks are still getting through.”
More from Steve Ragan
- Anonymous Claims Attack on IP Surveillance Firm Brickcom, Leaks Customer Data
- Workers Don’t Trust Employers with Personal Data: Survey
- Root SSH Key Compromised in Emergency Alerting Systems
- Morningstar Data Breach Impacted 184,000 Clients
- Microsoft to Patch Seven Flaws in July’s Patch Tuesday
- OpenX Addresses New Security Flaws with Latest Update
- Ubisoft Breached: Users Urged to Change Passwords
- Anonymous Targets Anti-Anonymity B2B Firm Relead.com
Latest News
- Industrial Giant ABB Confirms Ransomware Attack, Data Theft
- Organizations Worldwide Targeted in Rapidly Evolving Buhti Ransomware Operation
- Google Cloud Users Can Now Automate TLS Certificate Lifecycle
- Zyxel Firewalls Hacked by Mirai Botnet
- Watch Now: Threat Detection and Incident Response Virtual Summit
- NCC Group Releases Open Source Tools for Developers, Pentesters
- Memcyco Raises $10 Million in Seed Funding to Prevent Website Impersonation
- New Russia-Linked CosmicEnergy ICS Malware Could Disrupt Electric Grids
