Saturday, July 01, 2023

4th Night of Nation-Wide Unrest

 

LIVE
New
New

Fires rage as police detain nearly 1,000 on fourth night of French protests

French police arrest hundreds during protests
03:29 - Source: CNN
Paris, FranceCNN — 

Fires raged across protest sites in France and nearly 1,000 people were detained as violent demonstrations over the killing of a 17-year-old shot by police entered a fourth night.

Protests continued into the early morning of Saturday in defiance of a ban announced a day earlier on all “large-scale events” in the country, with rioting breaking out in several cities, CNN affiliate BFMTV reported.

France’s Interior Ministry said Saturday 994 people had been detained following the fourth night of violence. It said 2,560 fires had been reported on public roads, with 1,350 cars burned, and there had been 234 incidents of damage or fire in buildings.

Seventy-nine police and gendarmes were injured over Friday night and there had been 58 attacks on police and gendarme stations, it added.

Social media videos of scenes in Lyon, geolocated by CNN, showed rapid gunfire from an automatic rifle at night, fireworks being released at a protest and demonstrators next to burning fires.

There was an explosion in the Old Port of Marseille on Friday evening, according to BFMTV, but no casualties had been reported. It also shared video showing damage to the Alcazar library in Marseille which it said had been vandalized during the night.

The continued violence comes despite French police deploying 45,000 officers, special units, armored vehicles and helicopters across the country on Friday.

The country’s interior minister, Gerald Darmanin, had previously told BFMTV that that the violence had become a “lot less intense” and the situation in the Paris region calmer, though he said things remained tense in Marseille and Lyon.

Darmanin said in a tweet that reinforcements would be sent to Marseille following reports by the local mayor of violence and looting.

Marseille mayor Benoit Payan had tweeted late Friday night that the scenes were “unacceptable” and called upon the state to “immediately send additional law enforcement forces.”

The previous night, 917 people had been detained, among them children as young as 13, Darmanin told French TV channel TF1.

Why are people protesting?

The unrest in France is a response to the death of 17-year-old Nahel, who was shot dead during a traffic stop Tuesday morning in the Paris suburb of Nanterre.

A funeral for Nahel is scheduled to take place on Saturday at 11 a.m. local time (5 a.m. ET).

Footage of the incident filmed by a bystander showed two officers standing on the driver’s side of the car, one of whom fired his gun at the driver despite not appearing to be in any immediate danger.

The officer has said he fired his gun out of fear that the boy would run someone over with the car, according to Nanterre prosecutor Pascal Prache.

The officer currently faces a formal investigation for voluntary homicide and has been placed in preliminary detention.

Despite calls from top officials for patience to allow time for the justice system to run its course, a sizable number of people across France remain shocked and angry, especially young men and women of color who have been victims of discrimination by police. Nahel was of Algerian descent.

Looting is taking place amid the riots, French authorities say.

Protests appear even to have spread to overseas French territories.

A man was killed by a “stray bullet” during riots in Cayenne, the capital of French Guiana, on Thursday evening, according to a statement from the city’s mayor.

“The situation is worrisome with the violent riots that have been ongoing in mainland France for several days. Our territory must not be engulfed in this spiral of violence,” the statement read.

Authorities in Réunion, a French territory in the Indian Ocean, said Saturday that at least 28 people had been detained in riots there, while five police officers and a gendarme were injured.

Darmanin has said that the death of Nahel “cannot justify the disorder and the delinquency,” while French Justice Minister Éric Dupond-Moretti has called for “firm sanctions” against the rioters and said that “justice was not achieved by looting, smashing public establishments and attacking people.”

State of emergency ‘not necessary’: Elysée

This level of unrest and rioting has not been seen in France since 2005, when the deaths of two teenage boys who were hiding from police sparked weeks of rioting and prompted the government to call a state of emergency.

But the French government has so far resisted calling a state of emergency this time around.

A spokesperson for the Elysée said Friday that a state of emergency was “not necessary” and that a “gradual response” to the violence seen in recent days was “more appropriate.”

The spokesperson noted that the 2005 state of emergency was called “after about nine days of violence,” adding that the law surrounding it was an “exception” that should be used only “when the situation on the ground requires it.”

“This is not the revolt of neighborhoods. This is not about disenfranchised neighborhoods. This is the action of a delinquent minority,” the spokesperson said, denying there was any racial motivation behind the shooting and insisting it was an “individual act” that did not represent the police at large.

France sees fourth consecutive night of nationwide unrest

PROXY JACKING: Low-effort and High-reward Tactic of Leeching compromised Devices' Resources

Akamai first spotted the attacks on June 8 after multiple SSH connections were made to honeypots managed by the company's Security Intelligence Response Team (SIRT). 
What is proxy jacking?
  • Proxyjacking is a new phenomenon brought on by the growth and use of proxyware services in the last couple of years. A proxyware service is a totally legitimate and nonmalicious application or software that you can install on your internet-connected devices. 
  • When you run it, you share your internet bandwidth with others who pay to use your IP address. These services, such as IPRoyal, Honeygain, Peer2Profit, and others, pay for each IP address you share, based on the number of hours you run the application.
  • These services have been used in adware attacks previously reported by Cisco Talos Intelligence Group and AhnLab Security Emergency response Center (ASEC). Proxyware services enable users to make money by sharing their internet connection with others. 
  • As Cisco Talos explained in their blog post, attackers are “leveraging these platforms to monetize the internet bandwidth of victims, similar to how malicious cryptocurrency mining attempts to monetize the CPU cycles of infected systems.”

New proxy jacking attacks monetize hacked SSH servers’ bandwidth

 
  • June 30, 2023
  •  
  • 02:47 PM
  •  
  • 0

Hacker

"Attackers behind an ongoing series of proxyjacking attacks are hacking into vulnerable SSH servers exposed online to monetize them through proxyware services that pay for sharing unused Internet bandwidth.
Like cryptojacking, which allows attackers to use hacked systems to mine for cryptocurrency, proxyjacking is a low-effort and high-reward tactic of leeching compromised devices' resources.
  • However, proxyjacking is harder to detect because it only leeches on hacked systems' unused bandwidth and doesn't impact their overall stability and usability.
While threat actors can also use hacked devices to set up proxies that can help them hide their traces and obfuscate malicious activity, the cybercriminals behind this campaign were only interested in monetization through commercial proxyware services.

"This is an active campaign in which the attacker leverages SSH for remote access, running malicious scripts that stealthily enlist victim servers into a peer-to-peer (P2P) proxy network, such as Peer2Proxy or Honeygain," said Akamai security researcher Allen West.
"This allows for the attacker to monetize an unsuspecting victim's extra bandwidth, with only a fraction of the resource load that would be required for cryptomining, with less chance of discovery."
While investigating this campaign, Akamai found a list containing the IP that started the investigation and at least 16,500 other proxies shared on an online forum.

Proxyware services and Docker containers
  • Akamai first spotted the attacks on June 8 after multiple SSH connections were made to honeypots managed by the company's Security Intelligence Response Team (SIRT).
Once connected to one of the vulnerable SSH servers, the attackers deployed a Base64–encoded Bash script that added the hacked systems to Honeygain's or Peer2Profit's proxy networks.
The script also sets up a container by downloading Peer2Profit or Honeygain Docker images and killing other rivals' bandwidth-sharing containers.
  • Akamai also found cryptominers used in cryptojacking attacks, exploits, and hacking tools on the compromised server used to store the malicious script. This suggests the threat actors have either fully pivoted to proxyjacking or used it for an additional passive income.
"Proxyjacking has become the newest way for cybercriminals to make money from compromised devices in both a corporate ecosystem as well as the consumer ecosystem," West said.
"It is a stealthier alternative to cryptojacking and has serious implications that can increase the headaches that proxied Layer 7 attacks already serve."


This is just one of many similar campaigns that enroll systems they compromise into proxyware services like Honeygain, Nanowire, Peer2Profit, IPRoyal, and others, as Cisco Talos and Ahnlab previously reported.
  • In April, Sysdig also spotted proxyjackers leveraging the Log4j vulnerability for initial access, allowing them to make profits of up to $1,000 for every 100 devices added to their proxyware botnet."

Related Articles: 


Hackers infect Linux SSH servers with Tsunami botnet malware

Hackers use Azure Serial Console for stealthy access to VMs

Cartoon Carousel The nation’s cartoonists on the week in politics | By POLITICO STAFF 01/23/2026 05:00 AM EST

Every week political cartoonists throughout the country and across the political spectrum apply their ink-stained skills to capture the fo...