2010 cyberattacks on Myanmar

The 2010 cyberattacks on Myanmar (also known as Burma) were distributed denial-of-service attacks (DDoS) that began on 25 October,[1] occurring ahead of the 2010 Burmese general election, which is widely viewed as a sham election.[2][3] This election was the first that Burma had had in 20 years.[4] The attacks were significantly larger than attacks against Estonia and Georgia in 2007 and 2008 respectively.[5] The attack followed a similar one on 1 February 2010,[6] and also followed an incident of a total loss of connection to the internet the previous spring when a submarine communications cable was severed accidentally.[7]

## Contents

* 1 Attacks beginning 25 October 2010
* 2 Technical details
* 3 Cyberattacks in Burma prior to the 2010 election
* 4 See also
* 5 References

## Attacks beginning 25 October 2010

Over the period of a week, a large-scale massive DDoS attack targeted Burma's main Internet provider, the Ministry of Post and Telecommunication. Successful attacks to this network interfered with the majority of all incoming and outgoing network traffic.

The motivation for the attacks, and hence the culprits, were unclear, but there was significant speculation that blamed the Burmese government for a pre-emptive attack to disrupt Internet access just before the general elections. The ruling military junta, the State Peace and Development Council (SPDC), was known for denying universal human rights such as freedom expression; the government's efforts to silence dissent are extended to cyberspace, and it has one of the most restrictive systems of Internet control in Asia.[8] The fact that international observers and foreign journalists were not being allowed into the country to cover the polls raised suspicions that Burma's military authorities could have been trying to restrict the flow of information over the election period.[5]

## Technical details

A DDoS attack attempts to flood an information gateway with data exceeding its bandwidth. The "distributed" element of a Distributed Denial of Service means that it involves PCs spread all over the world. These enslaved computers, called "botnets," are usually home computers that have been hijacked and compromised by a virus. Botnets are usually rented out by cyber criminals for various purposes, which includes web attacks. They can be controlled from across the internet.[5] The size of the October–November 2010 attacks increased daily from 0.5 to 10-15 Gbit/s, each daily attack lasting over eight hours (always during regular office hours), from computers across the globe. This was several hundred times more than enough to overwhelm the country's 45 Mbit/s T3 terrestrial and satellite links.[9] Attacks on blogging websites in September were also on the order of Gbit/s.[10]

By comparison, the 2007 cyberattacks on Estonia were at most 90 Mbit/s, lasting between a minute to over 10 hours.[11]

## Cyberattacks in Burma prior to the 2010 election

This cyber attack notably followed a similar one on 1 February 2010, when the internet link service of Myanmar's Yatanarpon Teleport Company was struck,[6] and also followed the incident of a total loss of connection to the internet the previous spring when a submarine communications cable was severed accidentally.[7]

Despite the heavy hand that the regime wields over cyberspace, information communication technologies (ICTs) have provided Burmese opposition groups the means to challenge the government by broadcasting their message to the world. There has been an ongoing battle between the liberation technologies and the authoritarian government. In 2000, Burmese political activists received numerous e-mails that contained viruses, which many believe were part of an organised campaign perpetrated by state agents.[8] The first major example of a DDoS attack in Burma was in 2007, during the Saffron Revolution when Burmese activists managed to put videos and pictures of the demonstrations and government crackdown on the internet, at which time the government severed the internet connection for almost two weeks.[8]

Near the one-year anniversary of the Saffron Revolution, the websites of three main Burmese independent media organisations were attacked and effectively silenced. The Democratic Voice of Burma and The Irrawaddy were made inaccessible through a DDoS attack, and the website for Mizzima News was defaced. Through 2009 and 2010, attacks on Burmese opposition media sites continued periodically.[8] The timing of these attacks and the nature of the websites being attacked indicate a political connection. Although the identity of the attackers remain unknown, it is widely believed that the government played a role. This belief is still held, because the Burmese government has consistently made efforts to control and censor the communications environment of the country. Also, the timing and co-ordination of these attacks being around the anniversary of the Saffron Revolution suggests that the motivation of them was to prevent the websites from commemorating the protests and possibly mobilising new political actions.[8]

In September 2010, coinciding with the third anniversary of the Saffron Revolution,[12] the websites belonging to independent and opposition news sites and blogs were brought down by DDoS attacks similar to, but less powerful than, the ones that took place prior to the election.[10] On 27 September 2010, DDoS was used specifically against two news websites in Burma: the Democratic Voice of Burma and The Irrawaddy Magazine. Both of these magazines were providers of independent coverage of current affairs in Burma. These attacks were believed to originate from the Burmese government, and with the election a month away, media workers feared that this attack was a test run leading up to the election. In 2009, Burma ranked 171 out of 175 countries in the Reporters Without Borders (RSF) Press Freedom Index.[13]

## See also

* Internet in Burma

## References

1. ↑ "Internet out hits tourism sector". Myanmar Times. 1 November 2010. http://www.mmtimes.com/2010/news/547/news54716.html.
2. ↑ Clegg, Nick (3 October 2010). "Myanmar's Sham Election". The New York Times. https://www.nytimes.com/2010/10/04/opinion/04iht-edclegg.html.
3. ↑ "Protesters in Japan decry Myanmar 'sham election' plan". Channel News Asia. 27 October 2010. http://www.channelnewsasia.com/stories/afp_asiapacific/view/1089673/1/.html.
4. ↑ Sutherland, J.J. (4 November 2010). "Myanmar's Internet Under Cyberattack". NPR. https://www.npr.org/blogs/thetwo-way/2010/11/04/131070830/myanmar-s-internet-under-cyberattack.
5. ↑ 5.0 5.1 5.2 "Burma hit by massive net attack ahead of election". BBC News. 4 November 2010. https://www.bbc.co.uk/news/technology-11693214.
6. ↑ 6.0 6.1 Feng, Yingqiu (3 November 2010). "Myanmar Internet link continues to meet with interruption". People's Daily. http://english.peopledaily.com.cn/90001/90781/90877/7187339.html.
7. ↑ 7.0 7.1 Seltzer, Larry (11 April 2010). "DDoS Attack on Myanmar Takes the Country Offline". PC Magazine. https://www.pcmag.com/article2/0,2817,2372123,00.asp.
8. ↑ 8.0 8.1 8.2 8.3 8.4 Sample, Charmaine; Nart Villeneuve; Masashi Crete-Nishihata (April 2013). "8". Culture and Computer Network Attack Behaviors. pp. 153–176. http://access.opennet.net/wp-content/uploads/2011/12/accesscontested-chapter-08.pdf. Retrieved 1 November 2014.
9. ↑ Labovitz, Craig (3 November 2010). "Attack Severs Burma Internet". Arbor Networks. http://asert.arbornetworks.com/2010/11/attac-severs-myanmar-internet/.
10. ↑ 10.0 10.1 Wade, Francis (29 September 2010). "Scale of cyber attacks 'rare and serious'". Democratic Voice of Burma. http://www.dvb.no/news/scale-of-cyber-attacks-‘rare-and-serious’/11986.
11. ↑ Nazario, Jose (29 September 2010). "Estonian DDoS Attacks - A summary to date". Arbor Networks. http://ddos.arbornetworks.com/2007/05/estonian-ddos-attacks-a-summary-to-date/.
12. ↑ Nizza, Mike (28 September 2007). "Burmese Government Clamps Down on Internet". The New York Times. http://thelede.blogs.nytimes.com/2007/09/28/burmese-government-clamps-down-on-internet.
13. ↑ "Stop Cyber Attacks Against Independent Burmese Media". Reporters Without Borders. 5 October 2010. http://en.rsf.org/burma-nouvel-article-05-10-2010,38494.html.

* v
* t
* e

Hacking in the 2010s

| <- 2000s | Timeline | 2020s ->

|
|

Major incidents|

| 2010|

* Operation Aurora
* Australian cyberattacks
* Operation ShadowNet
* Operation Payback

|

2011|

* DigiNotar
* DNSChanger
* HBGary Federal
* Operation AntiSec
* Operation Tunisia
* PlayStation
* RSA SecurID compromise

2012|

* LinkedIn hack
* Stratfor email leak
* Operation High Roller

2013|

* South Korea cyberattack
* Snapchat hack
* Cyberterrorism Attack of June 25
* 2013 Yahoo! data breach

2014|

* Anthem medical data breach
* Operation Tovar
* iCloud leaks of celebrity photos
* 2014 JPMorgan Chase data breach
* Sony Pictures hack
* Russian hacker password theft
* 2014 Yahoo! data breach

2015|

* Office of Personnel Management data breach
* Hacking Team
* Ashley Madison data breach
* VTech data breach
* Ukrainian Power Grid Cyberattack
* SWIFT banking hack

2016|

* Bangladesh Bank robbery
* Hollywood Presbyterian Medical Center ransomware incident
* Commission on Elections data breach
* Democratic National Committee cyber attacks
* Vietnam Airport Hacks
* DCCC cyber attacks
* Indian Bank data breaches
* Dyn cyberattack
* Russian interference in the 2016 U.S. elections

2017|

* 2017 Macron e-mail leaks
* WannaCry ransomware attack
* Westminster cyberattack
* Petya cyberattack
* 2017 cyberattacks on Ukraine
* Equifax data breach
* Deloitte breach
* Disqus breach

2018|

* Trustico
* Exactis
* Atlanta cyberattack

2019|

* Sri Lanka cyberattack
* Baltimore ransomware attack
* 2019 Bulgarian revenue agency hack
* Capital One data breach
* Zynga Breach

Groups|

| Hacktivism|

* Anonymous
* associated events
* CyberBerkut
* GNAA
* Goatse Security
* Lizard Squad
* LulzRaft
* LulzSec
* New World Hackers
* NullCrew
* OurMine
* PayPal 14
* RedHack
* TeaMp0isoN
* UGNazi

|

Advanced Persistent Threat|

* Bureau 121
* Carbanak (group)
* Charming Kitten
* Cozy Bear
* Elfin Team
* Equation Group
* Fancy Bear
* FreeMilk
* Guccifer 2.0
* Hacking Team
* Helix Kitten
* Iranian Cyber Army
* Lazarus Group (BlueNorOff) (AndAriel)
* NSO Group
* PLA Unit 61398
* PLA Unit 61486
* PLA Unit 78020
* PLATINUM
* Pranknet
* Red Apollo
* Rocket Kitten
* Syrian Electronic Army
* Tailored Access Operations
* The Shadow Brokers
* Yemen Cyber Army

Individuals|

* DkD[||
* George Hotz
* Guccifer
* Jeremy Hammond
* Junaid Hussain
* Kristoffer von Hassel
* Mustafa Al-Bassam
* MLT
* Ryan Ackroyd
* Sabu
* Topiary
* Track2
* The Jester
* weev

Major vulnerabilities
publicly disclosed|

* Evercookie (2010)
* iSeeYou (2013)
* Heartbleed (2014)
* Shellshock (2014)
* POODLE (2014)
* Rootpipe (2014)
* Row hammer (2014)
* JASBUG (2015)
* Stagefright (2015)
* DROWN (2016)
* Badlock (2016)
* Dirty COW (2016)
* Cloudbleed (2017)
* Broadcom Wi-Fi (2017)
* EternalBlue (2017)
* DoublePulsar (2017)
* Silent Bob is Silent (2017)
* KRACK (2017)
* ROCA vulnerability (2017)
* BlueBorne (2017)
* Meltdown (2018)
* Spectre (2018)
* EFAIL (2018)
* Speculative Store Bypass (2018)
* Lazy FP State Restore (2018)
* TLBleed (2018)
* SigSpoof (2018)
* Foreshadow (2018)
* Fallout (2019)
* RIDL (2019)
* ZombieLoad (2019)
* BlueKeep (2019)

Malware|

| 2010|

* Bad Rabbit
* Stuxnet

|

2011|

* Kelihos
* Stars
* Metulji botnet
* Duqu
* Alureon

2012|

* Mahdi
* Carna
* Flame
* FBI
* Shamoon
* Red October
* Dexter

2013|

* DarkSeoul
* CryptoLocker

2014|

* Careto
* DarkHotel
* Duqu 2.0
* Dyreza
* FinFisher
* Brambul
* Destover
* Gameover ZeuS
* Carbanak

2015|

* Dridex
* Rombertik
* TeslaCrypt
* Hidden Tear

2016|

* Hitler
* Petya (NotPetya)
* KeRanger
* Jigsaw
* Pegasus
* Mirai
* X-Agent

2017|

* LogicLocker
* BrickerBot
* WannaCry

2018|

* Kraken

2019|

* ElectricFish
* Grum
* Joanap
* MEMZ
* NetTraveler
* NSA ANT catalog
* R2D2
* Regin
* Tinba
* Titanium
* Vault 7
* X-Tunnel
* ZeroAccess

0.00

(0 votes)

Original source: https://en.wikipedia.org/wiki/2010 cyberattacks on Myanmar. Read more

|

Retrieved from "https://handwiki.org/wiki/index.php?title=2010_cyberattacks_on_Myanmar&oldid=322947"
*[v]: View this template
*[t]: Discuss this template
*[e]: Edit this template