Cyber Risks · Krebs on Security

Ragebooter: ‘Legit’ DDoS Service, or Fed Backdoor?

Summary: KrebsOnSecurity reports that Justin Poland, a 22-year-old from Memphis who ran the DDoS-for-hire site ragebooter.net, claimed in a Facebook chat that he works for the FBI on Tuesdays at 1pm and that the bureau has full access to the site, including an IP logger that records users' addresses when they log in. The Memphis FBI field office declined to confirm or deny the claim, and security consultant Allison Nixon found that ragebooter.net averaged more than 400 attacks per day and leaked the usernames of logged-in attackers within the attack traffic itself.

What you should know: A booter operator's claim that federal agents monitor his customer logs means anyone who bought an attack through ragebooter.net may have had their identity recorded and handed to law enforcement - and the site's own traffic exposed attacker usernames to victims.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related