According to AT&T Cybersecurity analysts, China has once again activated and used the Great Cannon, a powerful DDoS attack tool that was last used two years ago.
The Great Cannon was last used in 2017 when the Chinese authorities used it for DDoS attacks on Mingjingnews.com, a Chinese news site in New York.
Prior to this, the tool was used to organize DDoS attacks on GitHub, since they host utilities to help Chinese users bypass the national firewall, and GreatFire.org is a portal dedicated to Internet censorship around the world.
Now AT&T Cybersecurity experts claim that the “Great Cannon” is used again. This time, the target of the attacks was LIHKG.com, an online platform where protest organizers in Hong Kong share information about the venue for daily demonstrations.
The site is also a gathering place for Hong Kong residents, where they publish stories about police abuse and download video evidence.
According to the LIHKG administration, during the August attack, the site received more than 1.5 billion requests per hour, while under normal circumstances, the site traffic is only 6.5 million requests per hour.
AT&T Cybersecurity Expert Conclusions
Still, it is disturbing to see an attack tool with the potential power of the Great Cannon used more regularly, and again causing collateral damage to US based services.