8 Sep 2014

Spark internet resumes normal speeds after attack

10:20 am on 8 September 2014

Spark says internet traffic volumes have returned to normal after a cyber attack on Friday night disrupted its services, Radio New Zealand is reporting.

A spokesperson said a malware attack from overseas caused a huge spike in the number of messages sent out from the computer it was downloaded to, overloading the network. Some of Spark’s customers had their internet access cut off, while for others it slowed down.

In response, Spark disconnected customers who downloaded the malware on their computers.

Spark says the malware attack which disrupted its network could be linked to a major hacking of Apple’s iCloud earlier last week for nude celebrity pictures, though the link was met with scepticism by some on social media:

Spark says some customers’ computers were being taken over in the attacks and then used to attack others, causing congestion.

The company is trying to find out where the attack came from, and says it serves as a warning to customers not to click on links they are not sure of. Spark says the attacks have apparently increased in frequency over the last few weeks, but it is a problem telecommunications companies are constantly dealing with.

Telecommunications Users Association acting chief executive Chris O'Connell told Radio New Zealand it was extraordinary that Spark was the only provider affected in this attack.

Mr O'Connell said solving the problem was like finding a needle in a haystack, because the company has over 600,000 customers and it needs to get affected computers off its network.

What is happening

  • Spark customer computers are attacked from overseas
  • Their computers are used as proxies to send data offshore again
  • The data is being sent to Slovakia but it is likely it ends up somewhere else
  • Other Spark customers have their services slowed or lost because of congestion
  • Spark has put in new equipment and defence software and staff are monitoring