Vietnamese DDos attacker arrested

Powered by SC Magazine
 

A Vietnamese man accused of launching a large-scale distributed denial-of-service (DDoS) attack against a commercial website was arrested by local authorities.

The attack on Vietco's website caused huge losses to the company, as it was forced to draft in 40 emergency technicians and left computer users unable to access the site.

Nguyen Thanh Cong is suspected of beginning an attack on the Vietnamese e-commerce site in March 2006. The website, which has 67,000 regular members, auctions cell phones and other consumer electronics products. It operates similiarly to eBay, which launches in Vietnam later this year.

Cong faces charges for creating a trojan that exploited a flaw in Microsoft's Internet Explorer. Said to have been planted on a pornographic website, the trojan turned unpatched computers into zombie PCs that were then ordered to repeatedly hit the Vietco site - overwhelming its servers.

The alleged hacker first gained notoriety as a member of the "Be yeu" (lovely baby) hacker group and was nicknamed DantruongX.

Police are also investigating suspected links between Cong and a gang forging ATM cards.

"The malicious attack on Vietco's website caused serious financial damage to the company and major inconvenience to innocent computer users. This arrest will come as a relief to law abiding web users and acts as a strong warning to other would be hackers," said Graham Cluley, senior technology consultant at Sophos. "The Vietnamese police should be commended for taking action, but authorities must also educate the general public about safe computing to better combat the increasing sophistication of internet hackers."

Cong's arrest came on the heels of the first virus-writer convictions in Vietnam. In April 2006, two brothers were found guilty of distributing the "Gai Xinh" (Pretty Girl) virus, which infected more than 20,000 computers. The pair received fines of $630.

Elsewhere in the world, a Spanish hacker was sentenced to two years in jail for a DDoS attack that affected three million internet users.

"Hackers typically use DDoS techniques as a way to blackmail websites, as we saw with the recent headline grabbing Millionaire Dollar Homepage attack," added Cluley.

Copyright © SC Magazine, US edition


 
 
 
Top Stories
Coalition's NBN cost-benefit study finds in favour of MTM
FTTP costs too much, would take too long.
 
Who'd have picked a BlackBerry for the Internet of Things?
[Blog] BlackBerry has a more secure future in the physical world.
 
Will Nutanix be outflanked before reaching IPO?
VMware muscles in on storage startup in hyper-converged infrastructure.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Which is the most prevalent cyber attack method your organisation faces?




   |   View results
Phishing and social engineering
  69%
 
Advanced persistent threats
  3%
 
Unpatched or unsupported software vulnerabilities
  11%
 
Denial of service attacks
  6%
 
Insider threats
  10%
TOTAL VOTES: 645

Vote