Vietnamese DDos attacker arrested

Powered by SC Magazine
 

A Vietnamese man accused of launching a large-scale distributed denial-of-service (DDoS) attack against a commercial website was arrested by local authorities.

The attack on Vietco's website caused huge losses to the company, as it was forced to draft in 40 emergency technicians and left computer users unable to access the site.

Nguyen Thanh Cong is suspected of beginning an attack on the Vietnamese e-commerce site in March 2006. The website, which has 67,000 regular members, auctions cell phones and other consumer electronics products. It operates similiarly to eBay, which launches in Vietnam later this year.

Cong faces charges for creating a trojan that exploited a flaw in Microsoft's Internet Explorer. Said to have been planted on a pornographic website, the trojan turned unpatched computers into zombie PCs that were then ordered to repeatedly hit the Vietco site - overwhelming its servers.

The alleged hacker first gained notoriety as a member of the "Be yeu" (lovely baby) hacker group and was nicknamed DantruongX.

Police are also investigating suspected links between Cong and a gang forging ATM cards.

"The malicious attack on Vietco's website caused serious financial damage to the company and major inconvenience to innocent computer users. This arrest will come as a relief to law abiding web users and acts as a strong warning to other would be hackers," said Graham Cluley, senior technology consultant at Sophos. "The Vietnamese police should be commended for taking action, but authorities must also educate the general public about safe computing to better combat the increasing sophistication of internet hackers."

Cong's arrest came on the heels of the first virus-writer convictions in Vietnam. In April 2006, two brothers were found guilty of distributing the "Gai Xinh" (Pretty Girl) virus, which infected more than 20,000 computers. The pair received fines of $630.

Elsewhere in the world, a Spanish hacker was sentenced to two years in jail for a DDoS attack that affected three million internet users.

"Hackers typically use DDoS techniques as a way to blackmail websites, as we saw with the recent headline grabbing Millionaire Dollar Homepage attack," added Cluley.

Copyright © SC Magazine, US edition


 
 
 
Top Stories
ANZ looks to life beyond the transaction
If digital disruptors think an online payments startup could rock the big four, they’ve missed the point of why people use banks, says Patrick Maes.
 
What InfoSec can learn from the insurance industry
[Blog post] Another way data breach laws could help manage risk.
 
A ten-point plan for disrupting security
[Blog post] How can you defend the perimeter when it’s in the cloud?
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
What is delaying adoption of public cloud in your organisation?







   |   View results
Lock-in concerns
  29%
 
Application integration concerns
  3%
 
Security and compliance concerns
  27%
 
Unreliable network infrastructure
  9%
 
Data sovereignty concerns
  21%
 
Lack of stakeholder support
  3%
 
Protecting on-premise IT jobs
  4%
 
Difficulty transitioning CapEx budget into OpEx
  3%
TOTAL VOTES: 1044

Vote