A report on Tom’s Guide discusses an attack against the game “League of Legends” by sending spoofed queries to the game server’s NTP service which effectively creates an amplification of the bandwidth used making the attack viable even from an attacker with a constrained pipe. There is nothing inherently sneaky here nor are DDoS attacks against NTP daemons “new” however this has appeared on every security blog from Bruce Schneier’s onward. So I guess I will contribute to this phenomenon which I attribute to a vacuum of truly interesting security related news with this post.
News amplification attack FTW
Haha.. Indeed!