
2/27/2018 · Marek Majkowski
What this post added
This post details a newly discovered and significant amplification attack vector using the memcached protocol over UDP port 11211. It explains the mechanics of such attacks, highlights the massive bandwidth generated (up to 260Gbps observed), identifies common sources of vulnerable memcached servers (OVH, Digital Ocean, Sakura), and provides actionable advice for memcached users, system administrators, and ISPs to mitigate these threats. It also emphasizes the ongoing challenge of IP spoofing and the need for developers to be cautious with UDP protocols.