Pages:
Author

Topic: DDOS for ransom - page 2. (Read 4823 times)

legendary
Activity: 3920
Merit: 2348
Eadem mutata resurgo
September 18, 2012, 06:50:10 PM
#34
Seems like there is a demand for a "Protection Business" ... pay some regularly and you get security services for your site that may include things like unspecified counter-attacks against attackers and other black arts that could serve as deterrents against would-be threats.
sr. member
Activity: 322
Merit: 250
September 18, 2012, 06:44:34 PM
#33
BitPay is back. excellent work!

the site should be up now.  Lets see if the attacker can get through Cloudflare this time.


On another site i have read that they use cloudflare resolver to figure the real ip. I could gather such a tool if youre interested, however, could be a fake soft tough.

I really dont know soo much about this stuff but i find it very interesting as im about to launch a pool.
Just starting to read in this topic, intersting keywords too are cloud hosting, managed firewall and load balancer.
hero member
Activity: 742
Merit: 500
September 18, 2012, 06:33:47 PM
#32
BitPay is back. excellent work!

the site should be up now.  Lets see if the attacker can get through Cloudflare this time.
legendary
Activity: 1078
Merit: 1002
September 18, 2012, 06:23:49 PM
#31
Not for me.
legendary
Activity: 1904
Merit: 1037
Trusted Bitcoiner
September 18, 2012, 05:52:53 PM
#30
BitPay is back. excellent work!
legendary
Activity: 1904
Merit: 1037
Trusted Bitcoiner
September 18, 2012, 05:44:42 PM
#29
Beside bulletproof hosting, there are also services like cloudflare, isnt that an option?

I'd like to see a bulletproof web hosting servers created by and for the bitcoin community

I'd sign up!
sr. member
Activity: 322
Merit: 250
September 18, 2012, 05:35:55 PM
#28
Beside bulletproof hosting, there are also services like cloudflare, isnt that an option?
legendary
Activity: 1904
Merit: 1037
Trusted Bitcoiner
September 18, 2012, 05:31:26 PM
#27
So is bitpay still under attack and still down?

It appears they are adding DDOS protection, they probably are creating a mirror right now.

I suggest everyone creates back-ups NOW, and start looking at DDOS protection.
legendary
Activity: 1078
Merit: 1002
September 18, 2012, 05:16:50 PM
#26
So is bitpay still under attack and still down?
legendary
Activity: 1904
Merit: 1037
Trusted Bitcoiner
sr. member
Activity: 322
Merit: 250
September 18, 2012, 04:39:46 PM
#24
Would it solve DDoS threats to put all services in Tor? Isn't it kinda DoS-proof?

Im not knowledgeable enough to give a concrete statement, but, if its hosted like silkroad for example the bots would probably need tor, so the botherder would need to install tor on them to be able to ddos as i understand it.
If thats correct the question should be is the tor network fast enough?
How much effort is it for a botherder to run tor on his bots?

hero member
Activity: 616
Merit: 500
September 18, 2012, 04:35:55 PM
#23
Would it solve DDoS threats to put all services in Tor? Isn't it kinda DoS-proof?
sr. member
Activity: 322
Merit: 250
September 18, 2012, 04:10:36 PM
#22
When somebody is DDOSING with his botnet he will likely loose a lot of bots.
So i would think, its not a thread at all, maybe for a few days or weeks but a botnet operator would need to be sure to be compensated to move these resources.
Guess, there are hundreds of ways for a botnet owner to monetize.


As a pool operator its much more important to care about the server security and the latest 0days, for example the plesk 0day a month ago or so was really ugly.

legendary
Activity: 2156
Merit: 1072
Crypto is the separation of Power and State.
September 18, 2012, 03:34:37 PM
#21
Quote
That's a nice looking webpage you got there.  Be a real shame if anything was to happen to it.

Send the bitcoins to 1B6MKB2MqY5LpM66fz4WJAeoer6ELGVGTx and nobody gets hurt.

/Russian gangster accent

Hmm, doesn't sound very intimidating.  Why would cybercriminals target such a tiny place anyway?  Is DDOS that cheap nowadays?  Hmmm....

*registers BitCannon.ru*

*creates site that automates the DDOS<->extortion<->BTC process*
hero member
Activity: 504
Merit: 500
September 16, 2012, 02:35:33 PM
#20
i don't understand the logic here very well

i think principle would tip the edge for taking a beating, rather than handing over money, since income is being crippled either way

It's a pointless game that has been played out many times against bitcoin services and is not new for the rest of internet exposed businesses. As you say it is much better to jsut ignore them and tighten up your anti ddos measures.

Not to mention the longer they maintain a ddos the more likely they are to get caught. Its only a matter of time before their c&c is given up by one of the zombies and they are found or shut down from there.
vip
Activity: 1386
Merit: 1136
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
September 16, 2012, 02:28:22 PM
#19
http://bitcoinmagazine.net/walletbit-under-ddos-1000btc-demanded/
DDOS extortion for a Bitcoin ransom could be the next big crime wave. I am sure that DDOS attacks are illegal to begin with, they take on a new dimension with extortion for a significant amount of money. Depending on whether or not Bitcoin is considered money, this could mean that law-enforcement agencies may be looking at a new threat vector with cyber-crime.

No longer are DDOS attacks done out of politically driven protest, they are now in the business of racketeering.

If nothing else, over time, this will encourage those developing infrastructure and network protocols to evolve the internet to have abilities to rapidly mitigate them.
full member
Activity: 168
Merit: 100
September 16, 2012, 02:24:12 PM
#18
i don't understand the logic here very well

i think principle would tip the edge for taking a beating, rather than handing over money, since income is being crippled either way
hero member
Activity: 532
Merit: 500
September 16, 2012, 01:54:10 PM
#17
http://bitcoinmagazine.net/walletbit-under-ddos-1000btc-demanded/
DDOS extortion for a Bitcoin ransom could be the next big crime wave. I am sure that DDOS attacks are illegal to begin with, they take on a new dimension with extortion for a significant amount of money. Depending on whether or not Bitcoin is considered money, this could mean that law-enforcement agencies may be looking at a new threat vector with cyber-crime.

No longer are DDOS attacks done out of politically driven protest, they are now in the business of racketeering.

I remember reading an article on online casinos that have this problem.  The criminals did not ask for bitcoins, just USD by wire transfer like through western union.

Could not find the original article, but here is another one:
http://www.blackjackchamp.com/casino-news/15733-online-gambling-sites-face-extortion/
sr. member
Activity: 434
Merit: 250
September 16, 2012, 01:48:51 PM
#16
Anyone got mnemonics/short hand or something that would allow a person to create and sign transactions in prison?  Then send them out to someone you can trust enough to broadcast to network (but perhaps not enough to keep your private keys.)

Tattoo's.
sr. member
Activity: 448
Merit: 252
September 16, 2012, 01:19:53 PM
#15
Again, even if they pay, in a high profile case like this it's going to be hard to find places to spend those Bitcoins because of their traceability.

I'd take them.
In America, they don't have Internet access in prison.

Anyone got mnemonics/short hand or something that would allow a person to create and sign transactions in prison?  Then send them out to someone you can trust enough to broadcast to network (but perhaps not enough to keep your private keys.)
Pages:
Jump to: