Skip to content
NewA calmer, faster ZeroHour
StoryThreat actormedium

Dark Storm Team advertises Telegram DDoS-for-hire; claims unverified

2 sources · 2 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

StealthMole says Dark Storm Team sells Telegram attack services, but claimed outages and extortion payments remain unconfirmed.

A November 6, 2026, StealthMole investigation describes Dark Storm Team using Telegram to advertise DDoS-for-hire, database dumps, compromised accounts and surveillance access, alongside hacktivist claims. The group was first observed in late 2023. It claimed the March 2025 outage of X, which X did not confirm, and later tied a $5,000 cryptocurrency demand to Amino. Researchers have not shown that Amino paid or independently verified the claimed attacks. Telegram bans have not stopped the brand; Team1914 shared replacement links after a September 2026 ban and forwarded posts and promotion help do not prove shared attack infrastructure.

Key facts
  • Three-hour DDoS ads listed at $20; a one-month service at $600.
  • Account or social-media access advertised from $250.
  • GLITCH is described as an owner persona, not a confirmed identity.
  • Check-Host posts show probe reachability, not outage causation or data theft.
  • An October 2026 DDoSia chat appearance does not prove Dark Storm used that tool.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 19, 2025GLITCH posted a $5,000 cryptocurrency demand tied to Amino · Cyber Security News
  2. Oct 22, 2025A formal claim followed the Amino payment demand · Cyber Security News
  3. Nov 6, 2026StealthMole published its Dark Storm Team investigation · Cyber Security News

What each outlet adds

beyond the shared facts
  • GBHackersSales account ID 8797265807 persisted through 2026 name changes.
  • Cyber Security NewsDates the Amino demand and lists GLITCH’s main Telegram ID.
Products
Amino
Threat actors
Dark Storm TeamTeam1914NoName057(16)
Victims
Amino
Organizations
StealthMole

Coverage

oldest first · one row per article · UTC
  1. · 1d ago GBHackersFirst report

    Dark Storm Team sells DDoS, dumps and stolen access on Telegram

    StealthMole says the advertised prices and extortion claims are not verified transactions or proven outages.

  2. · 1d ago Cyber Security News

    Dark Storm advertises DDoS-for-hire and a $5,000 Amino demand

    StealthMole tracked Telegram sales by persona GLITCH; claimed outages, including Amino, are not independently confirmed.