Anonymous Sudan claims DDoS attack that downed Cloudflare website.

Anonymous Sudan Claims Responsibility for Cloudflare Website DDoS Attack

The activist collective known as Anonymous Sudan has taken credit for a recent DDoS attack that temporarily knocked Cloudflare's website offline. While the disruption caused intermittent access issues for Cloudflare's main website, the company has clarified that the attack did not extend to any of its other products, services, or customer-facing operations.

"During the incident, only the www.cloudflare.com domain experienced brief connectivity disruptions. Our core services remained operational, ensuring no impact on our customers," a Cloudflare representative clarified to BleepingComputer.

The company also emphasized that their website infrastructure is isolated from their service platforms to prevent such incidents from having a wider impact. "We want to reassure everyone that Cloudflare's website is separate from our service infrastructure, which continues to function effectively without any compromise to service integrity."

Anonymous Sudan, also tracked as Storm-1359, has been linked to similar DDoS campaigns in the past, including those targeting Microsoft's digital suite in June, resulting in access issues for Outlook.com, OneDrive, and Azure Portal.

Although the group purports to focus on entities opposing Sudanese interests, some cybersecurity experts suggest the possibility of Russian affiliation, casting doubt on the group's publicly stated motives.

Cloudflare assured users that despite the brief troubles faced by their main website, alternative access points remained available. "We want to remind our users that during such incidents, the Cloudflare Dashboard and API remain accessible via dash.cloudflare.com, and that all Cloudflare services continue to function normally without any disruption," the company's statement concluded.

Cloudflare's Operations Hit by Power Outage, Triggering Wide-Ranging Service Disruptions

Cloudflare faced a significant setback last week when a power outage at a pivotal North American data center led to the temporary collapse of its dashboard and APIs, affecting a multitude of services. Among the disrupted functionalities were Logpush, WARP/Zero Trust device posture, Stream API, Workers API, and the Alert Notification System.

The power outage culminated in customers experiencing difficulties in account access, with numerous reports of 'Code: 10000' authentication errors and internal server issues when attempting to navigate Cloudflare's dashboard.

In a related incident on Monday, October 30, a broader range of Cloudflare's offerings suffered disruptions, impacting Access, CDN Cache Purge, Dashboard, Images, Pages, Turnstile, Waiting Room, WARP, and Workers KV. An investigation into the matter, as detailed in a subsequent post-mortem analysis, revealed that the cause was a misconfiguration during the deployment of a new Workers KV build, which led to the widespread service outages.