TechKnowSurge

VideoSecurityFree

Resource Inaccessibility

Resource inaccessibility—including blocked content, service interruptions, and unreachable sites—can signal a cyberattack or malware infection, such as a denial-of-service attack or a virus that redirects traffic through an unauthorized proxy server.

⚑ Complete this video to capture a CTF flag worth 1 point.

About this video

Resource inaccessibility is an important indicator of compromise that security professionals must be prepared to recognize and investigate. While a denial-of-service attack—designed to make a resource unavailable to legitimate users—is a well-known cause, inaccessible sites, blocked content, and service interruptions can also stem from other malicious activity on a system or network. A historically prevalent example involved viruses that, upon infecting a machine, would silently enable a proxy server in the operating system's network settings. Because all outbound traffic was then routed through that unauthorized proxy, the user was effectively cut off from every website and online resource. The infection itself might go unnoticed at first, with the symptom appearing simply as an inability to browse the internet. Remediation in this scenario requires locating the proxy configuration within Internet Options, navigating to the Connections tab, and opening LAN settings to uncheck and disable the proxy server entry. Once that change is applied, normal connectivity is restored. This example illustrates why understanding system-level network settings is a practical skill for anyone responding to endpoint security incidents, since malware frequently targets configuration points that are easy to overlook during a standard investigation.

What you'll learn

Identify resource inaccessibility as a potential indicator of compromise, including denial-of-service conditions and unauthorized proxy server configurations
Configure browser proxy settings to remediate connectivity issues caused by malware-induced proxy manipulation

What's covered

Resource Inaccessibility Indicators

Types of Inaccessibility
- Denial of Service Attack
- Blocked Content
- Service Interruptions
- Inaccessible Sites
Proxy Server Virus Example
- Virus Enables Proxy Server
- Blocks All Website Access
Fix: Disable Proxy Server
- Open Internet Options
- Go to Connections Tab
- Open LAN Settings
- Uncheck Proxy Settings

Key terms

Denial of Service: An attack that floods a system or network with traffic to make it unavailable to legitimate users.
Malware: Software specifically designed to disrupt, damage, or gain unauthorized access to a system.
Proxy Server: An intermediary server that handles requests between clients and other servers, providing anonymity and content filtering.
Indicators of Compromise: Indicators of Compromise are forensic artifacts such as file hashes, IP addresses, domain names, and registry keys that provide evidence a system may have been compromised, enabling threat detection and intelligence sharing.

Topics

Malware Analysis Denial Of Service Proxy Server Browser Configuration Indicators Of Compromise Cybersecurity

Transcript

One of the indicators could be resource inaccessibility, especially if it's like a denial of service attack. A denial of service attack is making some sort of resource unavailable. But it doesn't have to be just a denial of service attack, it could be for other reasons as well. Maybe we're seeing some sort of blocked content or service interruptions or inaccessible sites.

An example: a proxy server virus

Here's one that I saw a lot about 25 years ago, that a virus would infect a machine and then you couldn't make it to any website, and that's because it turned on a proxy server and then it wouldn't allow you to connect to anything, because it's trying to go through that proxy server.

Fixing it

To fix this, what you've got to do is bring up the internet options. So we're going to go into internet options, and under these internet connection settings, then we're going to change the proxy server, or in this case turn the proxy server off.

So in internet properties, I go to the connection tab. I take LAN settings, and uncheck the proxy settings. And then as soon as we do that, we can see that this now can come up with the proper information, the proper site.

Read the full transcript Show less

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →