Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Network Security

Syria Drops off The Internet, Again.

Syria was cut off from the Internet on Tuesday, and remains offline as of Wednesday morning, according to several US Internet firms and the State Department.

Syria was cut off from the Internet on Tuesday, and remains offline as of Wednesday morning, according to several US Internet firms and the State Department.

[Update 1PM ET: Syrian Internet traffic appeared to resume flowing at approximately 2:15 PM GMT – See images below]

Dan Hubbard, CTO for OpenDNS and Umbrella, the security unit of OpenDNS, was one of the first to mention the drop-off after noticing that at around 18:45 UTC, Internet traffic from Syria plummeted.

“At around 18:45 UTC the OpenDNS resolvers saw a significant drop in traffic from Syria,” Hubbard wrote in a blog post. “On closer inspection, it seems Syria has largely disappeared from the Internet.”

Syria Internet Cutoff

The US State Department also confirmed the outage via Twitter, saying, “Syria is currently experiencing an internet blackout as of this afternoon.” 

Firms including Google, Akamai, Arbor Networks and other firms have since confirmed the drop-off in traffic in Syria.

According to Google’s Transparency Report, the country was still offline at the time of publishing. (10:15AM ET) [Update: Syrian Internet traffic appeared to resume flowing at approximately 2:15 PM GMT – See image from Arbor Networks]

Syrian Internet

On Wednesday, the state-run Syrian Arab News Agency (SANA) reported that an optic cable problem caused the outage, something most are skeptical about. According to SANA, repairs were under way to restore services “as soon as possible,” citing communications official Bakr Bakr.

Advertisement. Scroll to continue reading.

“Shutting down Internet access to and from Syria is achieved by withdrawing the BGP routes from Syrian prefixes,” Hubbard explained.

Syria Flag“BGP distributes routing information and makes sure all routers on the Internet know how to get to a certain IP address,” Hubbard continued. “When an IP range becomes unreachable it will be withdrawn from BGP, this informs routers that the IP range is no longer reachable.”

On Tuesday, Hubbard said there were just three (3) routes in the BGP routing tables for Syria, while normally that number is close to eighty.

This is not the first time the Internet has been effectively shut off in Syria.

Following a similar country-wide outage in November 2012, the Syrian Minister of Information blamed terrorists and attempted to convince the world that the government had nothing to do with the outage.

“It is not true that the state cut the Internet. The terrorists targeted the Internet lines, resulting in some regions being cut off,” the Minister stated at the time.

According to activists, sudden Internet cut-offs can occur before major military movements, or to limit the communications of rebel fighters.

Following the November outage, Anonymous began targeting the Internet properties of the Syrian government and pro-government supporters in retaliation through “OpSyria”.

Following this event, it’s likely that the loosely-held hacktivist collective could launch a new round of attacks against Syrian government interests.

“Although we can’t yet comment on what caused this outage, past incidents were linked to both government-ordered shutdowns and damage to the infrastructure, which included fiber cuts and power outages,” Hubbard said.

Written By

For more than 15 years, Mike Lennon has been closely monitoring the threat landscape and analyzing trends in the National Security and enterprise cybersecurity space. In his role at SecurityWeek, he oversees the editorial direction of the publication and is the Director of several leading security industry conferences around the world.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Mike Dube has joined cloud security company Aqua Security as CRO.

Cody Barrow has been appointed as CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

More People On The Move

Expert Insights

Related Content

Identity & Access

Zero trust is not a replacement for identity and access management (IAM), but is the extension of IAM principles from people to everyone and...

Malware & Threats

The NSA and FBI warn that a Chinese state-sponsored APT called BlackTech is hacking into network edge devices and using firmware implants to silently...

Cybersecurity Funding

Network security provider Corsa Security last week announced that it has raised $10 million from Roadmap Capital. To date, the company has raised $50...

Network Security

Attack surface management is nothing short of a complete methodology for providing effective cybersecurity. It doesn’t seek to protect everything, but concentrates on areas...

Application Security

Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...

Network Security

A zero-day vulnerability named HTTP/2 Rapid Reset has been exploited to launch some of the largest DDoS attacks in history.

Identity & Access

Hackers rarely hack in anymore. They log in using stolen, weak, default, or otherwise compromised credentials. That’s why it’s so critical to break the...