Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks

citrix adc ddos attack

Citrix has issued an emergency advisory warning its customers of a security issue affecting its NetScaler application delivery controller (ADC) devices that attackers are abusing to launch amplified distributed denial-of-service (DDoS) attacks against several targets.

“An attacker or bots can overwhelm the Citrix ADC [Datagram Transport Layer Security] network throughput, potentially leading to outbound bandwidth exhaustion,” the company noted. “The effect of this attack appears to be more prominent on connections with limited bandwidth.”

ADCs are purpose-built networking appliances whose function is to improve the performance, security, and availability of applications delivered over the web to end-users.

The desktop virtualization and networking service provider said it’s monitoring the incident and is continuing to investigate its impact on Citrix ADC, adding “the attack is limited to a small number of customers around the world.”

The issue came to light after multiple reports of a DDoS amplify attack over UDP/443 against Citrix (NetScaler) Gateway devices at least since December 19, according to Marco Hofmann, an IT administrator for a German software firm ANAXCO GmbH.

http://feedproxy.google.com/~r/TheHackersNews/~3/4DJfJATymo8/citrix-adc-ddos-attack.html

Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks 1
Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks 2
Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks 3
Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks 4

Have a comment? Type it below!