A hacked DDoS-on-demand site offers a look into mind of “booter” users

[InfoSec News <alerts () infosecnews org>]

http://arstechnica.com/security/2015/01/a-hacked-ddos-on-demand-site-offers-a-look-into-mind-of-booter-users/

By Sean Gallagher
Ars Technica
Jan 19, 2015

A leaked database from a hacked denial-of-service site has provided some 
insight on what sorts of targets individuals will pay to knock offline for 
a few dollars or bitcoin. And it's safe to say that a significant 
percentage of them are not the brightest stars in the sky. To get an idea 
of who would use such a service and for what purposes, Ars analyzed the 
data from a recently-hacked DDoS for hire site: LizardSquad's 
LizardStresser.

"Booter" or "stresser" sites offer users the ability to pay for 
distributed denial of service attacks against a target, and these sites 
promise to try to disguise the nature of the attack with the fig leaf of 
being legitimate load testing sites. That wasn't so much the case with 
LizardStresser, the botnet-for-hire set up by the distributed denial of 
service crew known as LizardSquad. The group used its Christmas week DDoS 
attacks on Microsoft's Xbox Live network and Sony's Playstation Network as 
a form of advertising for the new service.

Since then, attacks on gamers have made up a significant percentage of the 
LizardStresser's workload. While more than half of the attacks launched by 
customers of the service have been against Web servers, a significant 
portion have targeted individuals or small community gaming 
servers—including Minecraft servers.

Things have not gone all that well for LizardSquad since the launch of 
LizardStresser. Shortly after the service—which uses a botnet of hacked 
home and institutional routers—was launched, members of LizardSquad 
started getting arrested. Last week the LizardStresser server was hacked, 
its database dumped and posted to Mega by the former operator of the 
darknet "doxing" site Doxbin.

[...]

--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/