Cops shut down one of the largest DDoS marketplaces in the world

Four admins were arrested for running webstresser.org, one of the biggest DDoS marketplaces on the internet.

One of the largest distributed denial of service (DDoS) marketplaces has been shut down by European law enforcement.

Webstresser.org, closed by Europol on Wednesday, boasted more than 100,000 users. It offered an array of services that allowed customers to wage attacks on specific targets that crippled internet infrastructure.

DDoS attacks work by forcing a flood of artificial internet traffic to a website until the traffic overloads a target and causes it to crash. The traffic often comes from large networks of computer systems that were compromised prior to the attack.

“We have a trend where the sophistication of certain professional hackers to provide resources is allowing individuals – and not just experienced ones – to conduct DDoS attacks and other kind of malicious activities online,” Steven Wilson, head of Europol’s European Cybercrime Centre (EC3), said in a statement. “It’s a growing problem, and one we take very seriously.”

The shutdown is important because, according to Europol, Webstresser.org helped launch upwards of 4 million DDoS attacks since its inception. Targets of the hacking service have included government institutions, police forces, banks and video game companies.

For about $20 per month, nearly anyone could have used webstresser to launch a DDoS attack. The tool required no technical experience or knowledge to operate and depending on the user’s exact membership plan, they could have access to a customer service channel.

Four alleged administrators of webstresser were arrested earlier this week. Each is believed to have raked in hundreds of thousands of dollars from their scheme.

“International law enforcement will not tolerate these illegal services and will continue to pursue its admins and users,” Jaap van Oss, Dutch chairman of the Joint Cybercrime Action Taskforce, said in a statement. “This joint operation is yet another successful example of the ongoing international effort against these destructive cyberattacks.”

The suspects were located around the globe, in the U.K., Canada, Croatia and Serbia. Servers that supported the website’s functions were seized in Germany and the U.S. The international nature of the case required the cooperation of various domestic law enforcement agencies.

For example, the investigation was led by the Dutch National High Tech Crime Unit in partnership with the UK National Crime Agency.

Europol coordinated the cybercrime fighting effort, which originally began in October 2017.

Officials seize 53 DDoS-for-hire domains in ongoing crackdown

Operation PowerOFF’s latest globally coordinated action identified more than 75,000 alleged cybercriminals. Officials warned each of them to stop jamming up traffic.

Officials gain control of Rapper Bot DDoS botnet, charge lead developer and administrator

Pro-Russian DDoS group NoName057(16) disrupted by international law enforcement operation

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Technology

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

• The Collective Cyber Defense letter wrote your next vendor questionnaire

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure