27 DDoS Attack Services Taken Down by Law Enforcement

December 12, 2024 at 07:21AM An international law enforcement operation, Operation PowerOff, successfully dismantled 27 DDoS-for-hire websites and arrested three suspects in France and Germany. Coordinated by Europol, the operation identified over 300 users and aimed to curb disruptive DDoS attacks, especially during the holiday season, which cause significant financial and operational harm. ### Meeting … Read more

Lights out for 18 more DDoS booters in pre-Christmas Operation PowerOFF push

December 12, 2024 at 07:12AM Europol’s Operation PowerOFF recently shut down 27 domains linked to DDoS services, arresting three suspected administrators. This collaborative effort involved 15 countries to combat cybercrime and deter potential users through ads, warnings, and outreach. Since 2018, the operation has led to significant progress against DDoS platforms and criminal activities. ### … Read more

Operation PowerOFF shuts down 27 DDoS-for-hire platforms

December 11, 2024 at 11:38AM Law enforcement from 15 countries has dismantled 27 DDoS-for-hire services, arrested three administrators, and identified 300 users as part of ‘Operation PowerOFF.’ This initiative, led by Europol, targets cybercrime involving DDoS attacks, which can disrupt online services, especially during peak holiday shopping. **Meeting Takeaways:** 1. **Operation PowerOFF Success**: An international … Read more

Cloudflare’s developer domains increasingly abused by threat actors

December 3, 2024 at 04:06PM Cybercriminals are increasingly abusing Cloudflare’s ‘pages.dev’ and ‘workers.dev’ for phishing and malicious activities, with Fortra reporting a 198% rise in phishing incidents on Cloudflare Pages and a 104% increase on Cloudflare Workers. This exploitation leverages Cloudflare’s trusted reputation, complicating detection and allowing efficient phishing campaigns. **Meeting Takeaways:** 1. **Increase in … Read more

THN Recap: Top Cybersecurity Threats, Tools and Tips (Nov 25 – Dec 1)

December 2, 2024 at 07:09AM Hackers launch approximately 2,200 attacks daily, with evolving threats like AI-generated phishing emails and adaptive malware. T-Mobile recently detected attempted intrusions by a group called ‘Salt Typhoon’ using a new tool, GHOSTSPIDER. Key developments include arrests in ransomware operations and new malware targeting various platforms. Stay vigilant in cybersecurity. ### … Read more

Matrix Botnet Exploits IoT Devices in Widespread DDoS Botnet Campaign

November 27, 2024 at 01:04AM A threat actor named Matrix has initiated a large-scale DDoS campaign by exploiting vulnerabilities in IoT devices, primarily targeting IP addresses in China and Japan. This operation utilizes publicly available scripts, promotes a DDoS-for-hire service via Telegram, and highlights the need for improved security practices to mitigate such attacks. **Meeting … Read more

Ngioweb Botnet Fuels NSOCKS Residential Proxy Network Exploiting IoT Devices

November 19, 2024 at 09:42AM The Ngioweb malware powers the NSOCKS residential proxy service, with 80% of its bots originating from the Ngioweb botnet. This operation, involving over 20,000 IoT devices, allows users to proxy malicious traffic globally, facilitating attacks while obscuring identities. The underground proxy market is expected to grow significantly. ### Meeting Takeaways: … Read more

DDoS site Dstat.cc seized and two suspects arrested in Germany

November 1, 2024 at 10:57AM Law enforcement has seized the Dstat.cc DDoS review platform, arresting two suspects linked to its operation as part of “Operation PowerOFF.” This international crackdown targets DDoS-for-hire services, which often disrupt online services and inflict economic damages. Investigations revealed connections to hacktivist groups and ongoing cybercrime enforcement efforts. **Meeting Takeaways:** 1. … Read more

Internet Archive Gets Pummeled in Round 2 Breach

October 21, 2024 at 04:17PM The Internet Archive faces renewed security issues after a hacker allegedly accessed Zendesk tokens, sending a mass email revealing vulnerabilities in its systems. Despite previous data breaches, the archive reportedly failed to rotate exposed API keys, raising concerns about proactive security measures. The organization has not commented on the situation. … Read more

U.S. Charges Two Sudanese Brothers for Record 35,000 DDoS Attacks

October 17, 2024 at 05:24AM Federal prosecutors charged two Sudanese brothers for operating a DDoS botnet, conducting 35,000 attacks, including on Microsoft. Their tool, linked to Anonymous Sudan, targeted critical infrastructure globally. If convicted, one brother faces life imprisonment. Law enforcement dismantled the botnet as part of coordinated action against cybercrime. ### Meeting Notes Takeaways … Read more