DDOS for ransom

[cbeast]

http://bitcoinmagazine.net/walletbit-under-ddos-1000btc-demanded/
DDOS extortion for a Bitcoin ransom could be the next big crime wave. I am sure that DDOS attacks are illegal to begin with, they take on a new dimension with extortion for a significant amount of money. Depending on whether or not Bitcoin is considered money, this could mean that law-enforcement agencies may be looking at a new threat vector with cyber-crime.

No longer are DDOS attacks done out of politically driven protest, they are now in the business of racketeering.

[cbeast]

Perhaps this is where vigilantism will respond. I wonder what some individual might do to a known DDOS attacker for 1K BTC if it was anonymously offered? This will be interesting to see how it unfolds.

[FreeMoney]

It doesn't seem like it would work.

You pay and they continue... then what?

If the DDoSer linked themselves to a psudo-identity they could build a rep for not doing that.

But it's still ridiculously unstable because once you pay you are a better target. Oh, n/m about the psudo-identity, they can just pretend to be someone new DDoSing you.

Odd to me that they would try for such a high amount in this case. Without knowing much about WalletBit it makes me wonder if the ransom is just weak cover for someone doing it out of spite.

[cbeast]

Why pay the ransom at all? Why not offer an anonymous bounty to have someone pay a friendly visit to the attacker's home? That would make the attacks stop permanently. I'm not saying that they should, but the attacker needs to think about the repercussions of their actions.

[thebaron]

Again, even if they pay, in a high profile case like this it's going to be hard to find places to spend those Bitcoins because of their traceability.

[Bitcoin Oz]

They should offer a 200btc reward on the attackers heads 

[jgarzik]

This is sadly already common in the poker world, HYIP forums, etc.  It was only a matter of time

I think somebody has already tried DDoS+ransom on MtGox, a while ago, IIUC.

[Ascholten]

If I am going to DDos you I am not going to do it from my own house.  The attack is also going to come from many sources too, hence the second D in DDOS.

With as many stupid people out there with unsecured systems, it's way too easy to set up an army of zombies to do ones bidding, it would be very hard at very best to track an individual like this down unless they were stupid enough to brag about doing the attack.

Aaron

[Ichthyo]

It doesn't seem like it would work.

You pay and they continue... then what?

indeed, thats what I'd expect to happen.


Then, after some time, the victim happens to encounter a friendly and helpful person with lots of connections
into "the scene", which points out (s)he can figure out who is behind those attacks and maybe help the victim
stopping them discretely for a way smaller "fee"....

Maybe it goes on even more subtle, along the lines that the victim just ends up doing "business" with the "angle",
you know, that kind of business which is more profitable for the "angle" and more risky for the victim. Surprisingly,
since the victim engaged into that business, those attacks will cease....


And the fun fact is: suddenly all those state-haters and freedom lovers start yelling for law enforcement

[CJGoodings]

This is nothing new, pool operators receive these type of threats all the time. Nobody pays, and the ddos waves hit the shore.

[hxtop]

May be speculation, because of recent hacker attacks too much, and too regularly, you feel it

[cbeast]

I actually think that DDOS attacks on Bitcoin financial and mining sites will continously escalate as Bitcoin itself grows. I suggest that countermeasures be developed (for law enforcement use, of course) to track down attackers. Also, Bitcoin sites will need to develop new hardening and stealth (decentralization) technologies to defend against attack.

[finkleshnorts]

Again, even if they pay, in a high profile case like this it's going to be hard to find places to spend those Bitcoins because of their traceability.

I'd take them.

[cbeast]

Again, even if they pay, in a high profile case like this it's going to be hard to find places to spend those Bitcoins because of their traceability.

I'd take them.

In America, they don't have Internet access in prison.

[scintill]

Again, even if they pay, in a high profile case like this it's going to be hard to find places to spend those Bitcoins because of their traceability.

I'd take them.

In America, they don't have Internet access in prison.

Anyone got mnemonics/short hand or something that would allow a person to create and sign transactions in prison?  Then send them out to someone you can trust enough to broadcast to network (but perhaps not enough to keep your private keys.)

[thebaron]

Anyone got mnemonics/short hand or something that would allow a person to create and sign transactions in prison?  Then send them out to someone you can trust enough to broadcast to network (but perhaps not enough to keep your private keys.)

Tattoo's.

[stochastic]

http://bitcoinmagazine.net/walletbit-under-ddos-1000btc-demanded/
DDOS extortion for a Bitcoin ransom could be the next big crime wave. I am sure that DDOS attacks are illegal to begin with, they take on a new dimension with extortion for a significant amount of money. Depending on whether or not Bitcoin is considered money, this could mean that law-enforcement agencies may be looking at a new threat vector with cyber-crime.

No longer are DDOS attacks done out of politically driven protest, they are now in the business of racketeering.

I remember reading an article on online casinos that have this problem.  The criminals did not ask for bitcoins, just USD by wire transfer like through western union.

Could not find the original article, but here is another one:
http://www.blackjackchamp.com/casino-news/15733-online-gambling-sites-face-extortion/

[Draino]

i don't understand the logic here very well

i think principle would tip the edge for taking a beating, rather than handing over money, since income is being crippled either way

[casascius]

http://bitcoinmagazine.net/walletbit-under-ddos-1000btc-demanded/
DDOS extortion for a Bitcoin ransom could be the next big crime wave. I am sure that DDOS attacks are illegal to begin with, they take on a new dimension with extortion for a significant amount of money. Depending on whether or not Bitcoin is considered money, this could mean that law-enforcement agencies may be looking at a new threat vector with cyber-crime.

No longer are DDOS attacks done out of politically driven protest, they are now in the business of racketeering.

If nothing else, over time, this will encourage those developing infrastructure and network protocols to evolve the internet to have abilities to rapidly mitigate them.

[sadpandatech]

i don't understand the logic here very well

i think principle would tip the edge for taking a beating, rather than handing over money, since income is being crippled either way

It's a pointless game that has been played out many times against bitcoin services and is not new for the rest of internet exposed businesses. As you say it is much better to jsut ignore them and tighten up your anti ddos measures.

Not to mention the longer they maintain a ddos the more likely they are to get caught. Its only a matter of time before their c&c is given up by one of the zombies and they are found or shut down from there.