Cloud-based web hosting company hit by two-week-long DDoS attack

Linode is a cloud-based provider of web-hosting to over 400,000 clients. Yesterday it advised all customers that it was resetting passwords due to a suspected data breach. That sounds like a standard response to a security issue, however the company added that it has been under a sustained DDoS attack for the past two weeks. In a detailed account of the ongoing attack, one of the company's network engineers explained that over the first six days the company suffered 30 different attacks that changed vectors every time the company plugged a vulnerability. Typically, a DDoS attack will last for a number of hours aiming to saturate and essentially disable the target's systems, often as a smoke-smokescreen for inserting malware of some sort; yet this prolonged attack, switching from vector to vector, seems to be a new and highly sophisticated variant.

An update from Linode about the recent DDoS attacks

Scheduled Maintenance Report for Linode