The UK’s National Crime Agency (NCA) has revealed that it operates several fake DDoS contractor websites to disrupt this thriving part of the cybercrime economy.
After deciding to go public with one of these sites, the agency revealed the news by replacing it with a splash page warning users that their data had been collected by law enforcement.
The NCA did not disclose how many sites it set up as part of the operation, but “thousands” of people have already sought the “booter” services needed to launch DDoS attacks against their targets. It claims to be visiting those sites.
Users must first register on the site. Registration provides NCA with useful details about each individual. It said it would “contact” each to warn them about being involved in cybercrime and passing the details of users outside the UK to international partners.
For more information on DDoS threats, see DDoS Attacks on British Companies Spike During Ukraine War.
Through DDoS contracting or “booter” services, the NCA democratized the ability of even non-technical cybercriminals to launch attacks, thereby causing serious damage to legitimate business operations and critical national infrastructure. I claimed.
The purpose of this campaign is to undermine criminal confidence in such services.
Alan Merrett of NCA’s National Cyber Crime Unit said:
“Legacy site takedowns and arrests are a key component of law enforcement response to this threat.
Fake sites are part of Operation Power Off, an international coordinated response to threats from DDoS contractor sites. In December 2022, Booter emerged victorious when the FBI, NCA, and others joined forces to seize 48 domains associated with his services, and he prosecuted six individuals for related crimes.
“We don’t disclose how many sites we have or how long they have been running,” concludes Merrett. “In the future, people who want to use these services aren’t sure who is actually behind it, so why should they risk it?”
