Skip to main content

Anonymous Threatens to Attack the Internet Sat., March 31

In case you missed it last month, Anonymous posted its intentions via Pastebin to shut down the Internet on March 31, 2012. This may be why LulzSec decided to rise from the ashes early, as by April 1 there probably won't be internet to showcase its new hacking prowess.

As previously reported, Anonymous claims that the upcoming Internet nuke -- this Saturday in fact -- will be in response to the now-defunct SOPA and PIPA bills, Wallstreet, "our irresponsible leaders and the beloved bankers who are starving the world for their own selfish needs out of sheer sadistic fun." Not to worry however: the internet won't be permanently killed off, just shut down long enough to make a point.

So how will Anonymous nuke the internet? By attacking the 13 "root" DNS servers using a Reflective DNS Amplification DDoS tool. This compiled tool is based on AntiSec's DHN and contains a few bug fixes, different DNS list/target support and is somewhat stripped down for speed.

"By cutting these off the Internet, nobody will be able to perform a domain name lookup, thus, disabling the HTTP Internet, which is, after all, the most widely used function of the Web. Anybody entering "http://www.google.com" or ANY other url, will get an error page, thus, they will think the Internet is down, which is, close enough."

A flaw that uses forged UDP packets will be used to trigger a rush of DNS queries all redirected and reflected to those 13 root IP addresses, they said. "Since the UDP protocol allows it, we can change the source IP of the sender to our target, thus spoofing the source of the DNS query," the group adds. "The DNS server will then respond to that query by sending the answer to the spoofed IP. Since the answer is always bigger than the query, the DNS answers will then flood the target IP."

Anonymous didn't state how long the Internet would be unavailable, only that it could last mere hours, or extend out for days. Nothing may happen at all -- the threat could merely be one big pre-April Fool's joke. It could also be purely fake and unrelated to Anonymous as seen with the supposed Anonymous operating system release weeks ago, although we haven't seen any reports denying the impending attack.

"No matter what, it will be global," the group concludes. "It will be known."