Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Tuesday February 05 2019, @09:15PM   Printer-friendly
from the if-you-can't-do-the-time dept.

Submitted via IRC for SoyCow1984

Courts Hand Down Hard Jail Time for DDoS — Krebs on Security

Seldom do people responsible for launching crippling cyberattacks face justice, but increasingly courts around the world are making examples of the few who do get busted for such crimes. On Friday, a 34-year-old Connecticut man received a whopping 10-year prison sentence for carrying out distributed denial-of-service (DDoS) attacks against a number of hospitals in 2014. Also last week, a 30-year-old in the United Kingdom was sentenced to 32 months in jail for using an army of hacked devices to crash large portions of Liberia’s Internet access in 2016.

Daniel Kaye, an Israel-U.K. dual citizen, admitted attacking an African phone company in 2016, and to inadvertently knocking out Internet access for much of the country in the process. Kaye launched the attack using a botnet powered by Mirai, a malware strain that enslaves hacked Internet of Things (IoT) devices like poorly-secured Internet routers and Web-based cameras for use in large-scale cyberattacks.

According to court testimony, Kaye was hired in 2015 to attack Lonestar, Liberia's top mobile phone and Internet provider. Kaye pocketed $10,000 for the attack, which was alleged to have been paid for by an individual working for Cellcom, Lonestar's competitor in the region. As reported by Israeli news outlet Haaretz, Kaye testified that the attack was ordered by the CEO of Cellcom Liberia.

In February 2017, authorities in the United Kingdom arrested Kaye and extradited him to Germany to face charges of knocking more than 900,000 Germans offline in a Mirai attack in November 2016. Prosecutors withheld Kaye's full name throughout the trial in Germany, but in July 2017 KrebsOnSecurity published findings that named Kaye as the likely culprit. Kaye ultimately received a suspended sentence for the attack in Germany, and was sent back to the U.K. to face charges there.

The July 2017 KrebsOnSecurity investigation also linked Kaye to the development and sale of a sophisticated piece of spyware named GovRAT, which is documented to have been used in numerous cyber espionage campaigns against governments, financial institutions, defense contractors and more than 100 corporations.

The U.K's National Crime Agency called Kaye perhaps the most significant cyber criminal yet caught in Britain. A report on the trial from the BBC says Kaye wept as he was taken away to jail.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 1, Insightful) by Anonymous Coward on Wednesday February 06 2019, @10:31AM (2 children)

    by Anonymous Coward on Wednesday February 06 2019, @10:31AM (#797114)

    IF you follow proper practices, a DDoS is a temporary, if costly at the time, inconvenience.

    Internet is like roads. Blocking roads is "inconvenient" too.. until the ambulance that is transporting a heart attack patient can't get there in time, a baby dies because house is on fire and you are blocking the fire trucks or an innocent victim is dead because someone high on drugs is on a rampage.

    Blocking roads doesn't do much damage either, until you think of all the shit that happens around. DDoS can result in same problems, including inability of emergency staff to communicate. Your idea is as stupid as arguing, "WTF? Can't they use a helicopter to get there? Can't they take out the rampaging guy from orbit?"

    That's why people that protest on roads, they don't go out of their way to block access to a fucking hospital! And this guy blocked hospitals. If he was protesting some porn site, you think the judge would give him 10 years too?

    Think dude. Think before you speak. Society is more fragile than you think and things like *COST* of doing stuff matters. That's why a DDoS should be treated no different as someone piling up shit across half a city intersections. 10 years for such crap against hospital network??

    The guy got off easy.

    Starting Score:    0  points
    Moderation   +1  
       Insightful=1, Total=1
    Extra 'Insightful' Modifier   0  

    Total Score:   1  
  • (Score: 2) by bob_super on Wednesday February 06 2019, @05:38PM

    by bob_super (1357) on Wednesday February 06 2019, @05:38PM (#797256)

    If a hospital gets into a critical life-threatening situation because they lost their main access to the internet, they really need to rethink the way they are doing things.
    Internet access is never guaranteed. The US reserves the right to shut it down any time. Many countries have done that many times when protests had to be squelched. ISPs have fucked up configurations, and backhoes have cut fibers, many many times...

    Yes, the guy is an asshole. No, he's not responsible for your silly idea that the hospital is lacking a basic contingency plan for an obvious failure point.
    Don't be so dramatic.

  • (Score: 0) by Anonymous Coward on Wednesday February 06 2019, @07:23PM

    by Anonymous Coward on Wednesday February 06 2019, @07:23PM (#797328)

    not society, but scum. bankster scum, medical industry scum, government scum, news media scum. they should just be glad they are not being dragged down the street by hooks.