Tuesday, December 5, 2023

World’s Biggest DDoS Attack Selling Market Place Finally Taken Down by Operation Power OFF

Administrators of DDoS-for-hire Service were arrested as a result of a joint Operation Power OFF led by the Dutch police, and UK’s National Crime Agency along with the support of Europol and other law enforcement agencies.

The 6 administrators behind DDoS-for-hire website were located in the United Kingdom, Croatia, Canada, and Serbia. Top users of the marketplace are from Netherlands, Italy, Spain, Croatia, the United Kingdom, Australia, Canada and Hong Kong.

DDoS-for-hire Service 

It is such a service that attackers have a number of remotely connected bots devices to direct a huge traffic to a website or the online platforms.

The DDoS-for-hire Service service provider Webstresser[.]org to be considered as the biggest marketplace for the DDOS and it has over 136,000 registered users and they conducted 4 million attacks.European police confirmed that the illegal service was shut down and its infrastructure was seized.

To make these services available users need to pay a nominal fee through online payment gateways or through cryptocurrencies. Registered users could avail this service as low as EUR 15.00 per month and it allows anyone to launch a DDoS attack even with zero technical skills.

“We have a trend where the sophistication of certain professional hackers to provide resources is allowing individuals – and not just experienced ones – to conduct DDoS attacks and other kinds of malicious activities online”, said Steven Wilson, Head of Europol’s European Cybercrime Centre (EC3).

“International law enforcement will not tolerate these illegal services and will continue to pursue its admins and users. This joint operation is yet another successful example of the ongoing international effort against these destructive cyber attacks” said Jaap van Oss, Dutch Chairman of the Joint Cybercrime Action Taskforce (J-CAT).

Europol said using stresser or booter services for DDoS attack lead to severe penalties such as prison sentence, a fine or both.

“DDoS attacks are illegal. Many IT enthusiasts get involved in seemingly low-level fringe cybercrime activities, unaware of the consequences that such crimes carry” Europol said.

Website

Latest articles

Hackers Use Weaponized Documents to Attack U.S. Aerospace Industry

An American aerospace company has been the target of a commercial cyberespionage campaign dubbed...

Active Attacks Targeting Google Chrome & ownCloud Flaws: CISA Warns

The CISA announced two known exploited vulnerabilities active attacks targeting Google Chrome & own...

Cactus Ransomware Exploiting Qlik Sense code execution Vulnerability

A new Cactus Ransomware was exploited in the code execution vulnerability to Qlik Sense...

Hackers Bypass Antivirus with ScrubCrypt Tool to Install RedLine Malware

The ScrubCrypt obfuscation tool has been discovered to be utilized in attacks to disseminate the RedLine Stealer...

Hotel’s Booking.com Hacked Logins Let Attacker Steal Guest Credit Cards

According to a recent report by Secureworks, a well-planned and advanced phishing attack was...

Critical Zoom Vulnerability Let Attackers Take Over Meetings

Zoom, the most widely used video conferencing platform has been discovered with a critical...

Hackers Using Weaponized Invoice to Deliver LUMMA Malware

Hackers use weaponized invoices to exploit trust in financial transactions, embedding malware or malicious...
Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

API Attack Simulation Webinar

Live API Attack Simulation

In the upcoming webinar, Karthik Krishnamoorthy, CTO and Vivek Gopalan, VP of Products at Indusface demonstrate how APIs could be hacked.The session will cover:an exploit of OWASP API Top 10 vulnerability, a brute force account take-over (ATO) attack on API, a DDoS attack on an API, how a WAAP could bolster security over an API gateway

Related Articles