By Robert McMillan
June 15, 2009 08:29 PM ET

An apparently ad-hoc cyber protest against the results of recent Iranian elections has knocked key Web sites offline. On Monday, sites belonging to Iranian news agencies, President Mahmoud Ahmadinejad and Iran's supreme leader Ayatollah Ali Khamenei, were knocked off-line after activists opposed to the Iranian government posted tools designed to barrage these Web sites with traffic.

This type of attack, known as a denial of service (DoS) attack, has become a standard political protest tool, and has been used by grassroots protesters in several cyber-incidents over the past few years, including cyber events in Estonia in 2007 and Georgia last year. Activists had encouraged anti-government protesters to use automatic Web page refresh tools such as Pagereboot.com, to hit government run site.

But they have also developed custom DoS tools. One such tool, called BWRaeper was posted to an Iranian sports discussion forum on Monday. Others are being promoted via Twitter and blogs, and hosted by activists in the U.S. The "campaign is starting to target international users, compared to the original one aiming to recruit Iranians only," said Dancho Danchev, a security consultant who has blogged about the tools. "Judging by the effect this crowdsourcing is having, they've disrupted the sites set as targets."

Danchev counts 12 sites as being under attack, including other news agencies, the Ministry of Foreign Affairs, Ministry of Justice, National Police, and the Ministry of the Interior. In response to the attacks, state-sponsored Iranian News site Fars News added a small piece of Web code that redirected the attack to pro-opposition Web sites, Danchev said via instant message. "Apparently, they thought that the attackers wouldn't stop their attack since they were also indirectly loading the [attack code]," he added. "They, however, didn't stop the attack."