Gobi’s website suffered a DDOS attack. Over 12000 compromised wordpress site attacked gobi.com.sg so much so that Symantec put out a top priority worldwide alert. The attack centered around Ninja forms weakness and unchallenged wordpress comment forms.
Traffic counter for gobi.com.sg:
Gobi’s team had their own IT consultant who was inept when it came to actual actions. Chef Gobi turned to Zifsoft for help. Within an hour the Zifsoft consultant redirected gobi.com.sg to a temporary website. The new website set up within minutes with the necessary information on menu, ordering, address, contact information and opening hours. The redirect meant no downtime. Zifsoft consultant used a prototype development of Aggressor Kali to find the RedX (the culprits). Aggressor Kali has two parts: the client (Aggressor Kali) and a cloud service (Salsa Pineus). The client is a sophisticated MSOutlook add-in that detects the DDOS attack emails, dissects the email, assembles the forensics data and hands them over to Salsa Pineus. The cloud system catalogs the dataset, constructs a report and alerts the ISP. Salsa Pineus has the capability to handle 10000 analysis an hour,
The Hitwheeste attackers underestimated Gobi. Who would have thought that a little pastry shop can defend itself against a DDOS attack and on a penny. Within 3 weeks the hitwheeste attack halted. The gobi.com.sg backup was uploaded last Friday with new security measures. The ISPs had a big part to play as they alerted the 12000 compromised websites that their website participated in the DDOS attack each contributing to 1-5 emails a day which works to about 40000-60000 messages sent to the gobi.com.sg website and email server.
Gobi’s website is hosted on a unmanaged server (dreamhost) which has close to zero support. The website is a demonstration of what can be done on a zero budget. The website has been up for 3 years with a decent traffic flow. The traffic is mostly generated from its fan base writing reviews on google and other blog websites. Despite having no websites prior to 2014, Gobi appears on all the top 20 Singapore blogs.
80% of the traffic is Singapore which is the main target audience. Gobi is the top 3 Singaporean owned Patisserie. It’s been around for 15 years. Though having a website has only been 3 years, it’s traffic speaks volume for the Gobi brand. Gobi has a huge internet presence despite being the new kid on the internet block. Gobi desserts sells the most heavenly cake with the yokeless cheesecake (vegetarian, no eggs, no bakes) being their signature, www.gobi.com.sg, +65 63452127.
