Changes

* November 1999-[[Shaft]] DDoS tool a packet flooding attack occurred with similarities to trinoo. It used TCP packets with sequence number 0x28374839 as signature.<ref>[http://www.garykessler.net/library/ddos.html Defenses Against Distributed Denial of Service Attacks]</ref>

* November 1999-[[Shaft]] DDoS tool a packet flooding attack occurred with similarities to trinoo. It used TCP packets with sequence number 0x28374839 as signature.<ref>[http://www.garykessler.net/library/ddos.html Defenses Against Distributed Denial of Service Attacks]</ref>

===2000 DDos Attacks===

===2000 DDoS Attacks===

* January - Stacheldraht 1.666 DDoS tool was discovered and widely spread on multiple compromised hosts in several organizations.<ref>[http://www.cert.org/advisories/CA-2000-01.html CA-2000-01 Denial-of-Service Developments]</ref>

* January - Stacheldraht 1.666 DDoS tool was discovered and widely spread on multiple compromised hosts in several organizations.<ref>[http://www.cert.org/advisories/CA-2000-01.html CA-2000-01 Denial-of-Service Developments]</ref>

* April - [[mstream]] Packet Amplified Attacks on Name Servers became common.<ref>[http://www.cert.org/incident_notes/IN-2000-04.html CERT Incident Note IN-2000-04]</ref>

* April - [[mstream]] Packet Amplified Attacks on Name Servers became common.<ref>[http://www.cert.org/incident_notes/IN-2000-04.html CERT Incident Note IN-2000-04]</ref>