Hacking duo charged with DDoSing Amazon, then bragging about it

[InfoSec News <alerts () infosecnews org>]

http://arstechnica.com/security/2012/07/hacking-duo-charged-for-amazon-ddos/

By Dan Goodin
Ars Technica
July 19 2012

Federal prosecutors have charged two men with using a computer botnet to 
launch crippling Web attacks on Amazon, eBay, and Priceline, and then 
bragging about them in online hacker forums.

Dmitry Olegovich Zubakha, 25, of Moscow, was arrested in Cyprus this 
week for his role in attacks taking place in June and July of 2008. One 
of those lasted three days and prevented Amazon customers from 
completing online transactions, according to an indictment unsealed 
Thursday. In the weeks that followed, Zubakha—who went by handles 
Eraflame, Dima-k17, and DDService—periodically visited hacker forums to 
take responsibility for the DOS (or denial-of-service) attacks and to 
post stolen credit card numbers he had obtained, prosecutors further 
alleged. In the same forums, he marketed hacking services including 
for-rent botnets.

Sergey Viktorovich Logashov was a co-conspirator in the DOS campaign, 
which also hit eBay and Priceline. This is all according to the 12-page 
indictment filed in US District Court in Seattle. At one point, he 
allegedly called Priceline and advertised his expertise in stopping the 
attacks, which were causing the websites to become unresponsive by 
bombarding them with more traffic than they could handle. Using a fleet 
of compromised computers, they overwhelmed their targets by causing huge 
numbers of requests for "large and resource intensive webpages on a 
magnitude of 600 percent to 1000 percent of normal traffic levels," 
prosecutors wrote in the indictment.

[...]

--
Learn how to be a Pen Tester, CISSP, ISSMP, or ISSAP with Expanding Security online.
Come to a free class and see how good and fun the program really is.
http://www.expandingsecurity.com/PainPill