Categories: Security News

Law Enforcement Agencies Shutdown a Marketplace that Renting out servers for Hackers

MaxiDed the marketplace that provides servers for child pornography sites, Command-and-control servers, sending spam messages and for DOS attacks was takedown in conjunction with joint operations from Royal Thai Police and Dutch National Police.

Police seized more than 10 servers from MaxiDed also known as bulletproof hosting company, according to the archived version of the website the company hosts nearly 2,500 servers at 30 hosting providers in 82 countries.

Over the years bulletproof hosting company preferred by the number of cybercrime group, it was used in Carbanak Hacker Group who attacks against various banks, financial institutions, the e-payment gateways. Also, their servers used in Mirai DDoS botnet and with a number of spam campaigns.

MaxiDed takedown

Thai police arrested 29-year-old Moldavian man in Thailand at a holiday resort, according to investigators he also owns file sharing service that shares child pornography.

The Bulgarian police arrested the second man a 37-year-old Moldavian who suppose to be server administrator of MaxiDed.

Dutch police said that the data seized from ten MaxiDed servers will be handed over to Europol, so it can be distributed to other foreign law enforcement agencies.

Now the company’s site has been redirected to the Dutch police with the notice

“The police investigation focuses on the criminal activities of MaxiDed and the people behind MaxiDed.
MaxiDed uses the Dutch (digital) infrastructure to provide services to criminals by renting out servers from which criminal activities can be deployed such as sending spam messages and causing DDOS attacks. The takedown of MaxiDed is a coordinated effort by law enforcement agencies from Thailand and The Netherlands.”
Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago