OcUK DDoS attack - £10,000 reward

shauncr91 · 21 Jan 2009 at 23:40

lemonkettaz said:
i could do with £10k

Who couldn't?

Rroff · 21 Jan 2009 at 23:42

bigredshark said:
Without serious evidence, 'it was x' won't get you a warrant and he'll be busy deleting anything incriminating. There's a reason nobody ever gets prosecuted, OCUK isn't exactly the first place to offer a reward...

I wouldn't say no one ever gets prosecuted... but its the exception rather than the rule.

rypt · 21 Jan 2009 at 23:42

shauncr91 said:
Who couldn't?

Plenty of people who have a lot more than that

Spie · 21 Jan 2009 at 23:48

lemonkettaz said:
Oh dear, didnt even know it was this serious, someone hacking... wish i was clevere i could do with £10k

Nothing has been hacked.

rypt · 21 Jan 2009 at 23:51

Spie said:
Nothing has been hacked.

Well that's not true is it? If this is using a zombie based botnet, then in order to get the said zombies a PC needs to get infected, which can be loosely termed as hacking.

shauncr91 · 21 Jan 2009 at 23:52

rypt said:
Well that's not true is it? If this is using a zombie based botnet, then in order to get the said zombies a PC needs to get infected, which can be loosely termed as hacking.

But OcUK hasn't been hacked.

crunchee · 21 Jan 2009 at 23:53

rypt said:
Well that's not true is it? If this is using a zombie based botnet, then in order to get the said zombies a PC needs to get infected, which can be loosely termed as hacking.

Infected PCs != Hacked PCs......

i think

rypt · 21 Jan 2009 at 23:53

shauncr91 said:
But OcUK hasn't been hacked.

And the quoted post never said he was talking about OCuk being hacked

crunchee said:
Infected PCs != Hacked PCs......

I DID say loosely. The modern term "hacker" is given to anyone who breaks into computers, and in order to infect a machine some form of break in has to occur, even if it's as simple as a user running porn.exe; you have still gained unauthorised use of the machine.

Historically hacker, just like gay, was a term that did not have any negative meaning to it.

Spie · 21 Jan 2009 at 23:55

rypt said:
And the quoted post never said he was talking about OCuk being hacked

True but to be 100% clear no OcUK server has been hacked.

Craig321 · 21 Jan 2009 at 23:56

2StepSteve said:
5 stars? Might wanna be looking into the people that voted 5 stars.. whats so amazing about this subject? It is a downer.

It's and interesting discussion... nothing wrong with giving it 5 stars.

bigredshark said:
Basically, you need to find the person sending the control commands, as they'll never actually be part of the attack themselves that's devilishly difficult.

Best option is...

(if they're tragicomically stupid) get yourself infected by the botnet carrying out the attack, monitor your inbound traffic and watch for the control signal. Only works if you can get yourself infected (pretty hard if you want to trace a specific attack) and they're utterly dumb enough not to hide the source of the control commands (quite common actually, most people behind this are just script kiddies after all with no real idea)

If they're serious about the attack (ransom, or genuinely trying to bring the company down) then they'd simply infect another computer with the 'command' program and run the commands there, the attacker would connect using some decent encryption/proxy etc.

Ghosteh · 21 Jan 2009 at 23:56

Spie, I emailed a part of a log, which mark has replied too, but I was wondering if there was any information you could release to try and compare and review and data you have. Going to try and speak to a few of my mates who are experts in this field tonight.

kenshinu · 21 Jan 2009 at 23:58

Hope you find this out. Does make you wonder why someone would want to do this though.

rypt · 22 Jan 2009 at 00:00

kenshinu said:
Does make you wonder why someone would want to do this though.

DDoS has turned into an industry now, where companies hire some kid in order to disrupt their competitors operations.
Put it this way, in the few days that OCuk store has been useless, how many orders do you think they lost to casual users (rather than die hards)?

Spie · 22 Jan 2009 at 00:00

Ghosteh said:
Spie, I emailed a part of a log, which mark has replied too, but I was wondering if there was any information you could release to try and compare and review and data you have. Going to try and speak to a few of my mates who are experts in this field tonight.

Thanks for the log. It's being analysed as we speak. Can't give out any info but I have just mailed you.

lemonkettaz · 22 Jan 2009 at 00:03

I don't know all the facts, infact I know nothing.

MikeHunt79 · 22 Jan 2009 at 00:08

I hope you catch whoever is involved, targeting an online shop is low IMO.

Snaggle · 22 Jan 2009 at 00:09

Mark sorry to hear of your troubles . The website issues have been a real problem recently for me as i have been trying to build and spec 3 machines for people and its been nearly impossible to do so . Luckily i know the people well and have asked them to wait untill i can get the data i need to spec there systems .

I think the 10k is a small price to pay to resolve these issues as not everyone is as patient when ordering parts . Good luck with finding and prosecuting them and if there is anything i can help with then feel free to contact me .

Persil

Marky · 22 Jan 2009 at 00:21

Good luck in your search - Will be glad to when it's all back to normal

Locke · 22 Jan 2009 at 00:23

I was saying to my friend the other day that there was DOS attacks on this forum/site.. thanks for clearing that up.

Anyway, if this person or group are slightly dumb, then I'm sure they will be caught as nothing is perfect.

el_dazza · 22 Jan 2009 at 00:24

Yep good luck in your search for the culprit Spie, it's pretty low of someone to do this. I should imagine it's compromised the business somewhat so they get whatever's coming to them.

OcUK DDoS attack - £10,000 reward

Godfather

Godfather

Godfather