[nsp-sec] pay 100 btc(bitcoin) or will be subjected to DDoS attacks 100 Gbit/s

Tom Fischer tfischer at bfk.de
Wed Sep 7 03:59:01 EDT 2011


Hi,

On Tue, Sep 06, 2011 at 04:52:12PM +0200, Tim Kleefass wrote:
> We received some e-mails today claiming different webserver from us or
> our customers "will be subjected to DDoS attacks 100 Gbit/s" if we do
> not "pay 100 btc(bitcoin)" to different bitcoin accounts.

looks like many tech-c contacts (for DE domains) received extortion
mails like

--snip--
Subject: DDOS $domain

Your site $domain will be subjected to DDoS attacks 100 Gbit/s.

Pay 100 btc(bitcoin) on the account [...]

Do not reply to this email
--snap--

Any in some cases we confirmed that $domain showed up on the 
Miner P2P botnet DDoS target list ...

for Miner see e.g.
http://www.securelist.com/en/blog/208193084/The_Miner_Botnet_Bitcoin_Mining_Goes_Peer_To_Peer

but keep in mind this is no strong evidence that the Miner DDoS 
and the extortion belongs together ...

-- 
Tom Fischer
BFK edv-consulting GmbH                  tel: +49 721 962 01-1
Kriegsstr. 100, D-76133 Karlsruhe        fax: +49 721 962 01-99



More information about the nsp-security mailing list