Cyber Risks · Krebs on Security

Lizard Kids: A Long Trail of Fail

Summary: The Lizard Squad, a group of young attackers behind crippling DDoS attacks on Sony's PlayStation and Microsoft's Xbox Live networks, launched a DDoS-for-hire service called LizardStresser at lizardstresser[dot]su, with subscriptions from $5.99 per month for 100-second attacks to $129.99 monthly for attacks lasting more than eight hours. The service's source code was lifted in its entirety from another booter called titaniumstresser, and coding weaknesses exposed information on all 1,700+ registered users, while the group's chat forum at lizardpatrol[dot]com was found hosted at the same Internet address as the Darkode cybercrime forum.

What you should know: A group that knocked the largest gaming networks offline turned the attention into a paid booter with 1,700+ registered users, and the exposed user list and shared Darkode hosting show how cheaply and carelessly DDoS-for-hire infrastructure is stood up.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related