UK's NCA Disrupts DDoS-for-Hire Services with Fake Websites and Education
The UK's National Crime Agency (NCA) has been actively combating DDoS-for-hire services, also known as 'booter' sites, through a creative and proactive approach. The agency has set up fake websites to gather information on users and deter them from launching attacks, following the international law enforcement operation 'Operation Power Off'.
In 2018, 'Operation Power Off' led to the shutdown of major DDoS-for-hire platform Webstresser.org and coordinated actions against over 250 users across Europe and beyond. The NCA, collaborating with Europol and international law enforcement agencies, seized 48 booter business domains and charged six U.S. men.
The NCA's strategy also includes educating potential users about the legal risks. Since 2020, they have been running online ads targeting young people. Last year, they went a step further by steering users towards a website detailing these risks through targeted ads. The NCA's fake booter sites have been accessed by several thousand people, with their data collected by investigators. Users based in the UK who access these sites are contacted by the NCA or police and warned about engaging in cyber crime.
Launching or hiring DDoS attacks is punishable in the UK under the Computer Misuse Act 1990. The U.S. Department of Justice (DOJ) also warns that using booter services can result in arrest, prosecution, and penalties under wire fraud laws and the Computer Fraud and Abuse Act.
The NCA's innovative approach to tackling DDoS-for-hire services has proven effective in disrupting these platforms and educating potential users about the legal consequences. By working collaboratively with international law enforcement, the UK continues to play a significant role in global cyber crime prevention.
