Spreading the Disease and Selling the Cure
Summary: A 21-year-old named Karim Rattani works at a Subway in Cartersville, Ga., while helping run two DDoS-for-hire services, grimbooter[dot]com and restricted-stresser[dot]info, plus a hosting firm called TheHosted[dot]me marketed as protection from the same attacks; the same Google Wallet takes payment for all three and traces back to him. Rattani says he only collects payments and wires the money minus his cut to partner Danial Rajput in Karachi, earning roughly $2,500 a month, and crimeflare.com has cataloged more than 200 DDoS-for-hire sites using CloudFlare's free service.
What's compelling: The same operator sells the attack and the cure, and CloudFlare's free tier keeps more than 200 such services online, so the barrier to buying a powerful DDoS attack is little more than a credit card or prepaid debit card.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026