Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
krebsonsecurity.com
krebsonsecurity.com
Unlike in Germany where I lost several social media accounts because my email service provider (pissmail) went to jail because someone signed up for his service and sent spam.
That doesn't sound right. I used PQ.Hosting once when I needed a quick temporary VPS, just like many other legitimate users. Yes they never asked much, but they also used to ban users left and right even for torrenting, so it wasn't bulletproof in any meaningful sense. I'm sure they were into shady stuff though, since their IP quality used to be absolute crap, but they did provide legitimate services as well.
plus they just gobble bandwidth. you want a bit to ensure your company looks real / makes some $$$ but you don't want to threaten your C2 nodes
I'm sorry this happened to you.
After reviewing your updated customer information, we have decided to deactivate your account because of some concerns we have regarding this information. Therefore, we have cancelled all your existing products and orders with us.
Best regards
Your Hetzner Online Team
---
This is the email that I received, after I mistyped my credit card data, when creating an account on Hetzner Cloud. You don't have to be a big cloud company to enforce the KYC rules to defend against fraud.
I wonder how big/small wa pissmail? Would be good to know where is the threshold of sanity:
1. staying with smaller providers is cheaper (and you usually get non-AI customer support)
2. at the risk of stepping into something that makes you lose your data (like you did)
I know in some markets crime pays more than legitimate work, but it never ceases to amaze me how much thought, effort, planning, and engineering goes into providing infrastructure IT services for cybercriminals. The people involved definitely have the skills to be profitable at legitimate work; it just puzzles me that they choose to support criminals.
I don't think it's that easy to go legit. having a tech job nowadays is already a luxury
As far as I can make sense of it, he enjoyed the thrill of feeling superior to others: Evading the law, exploiting people who viewed as stupid, and enriching himself in the process.
He got caught through a mistake that was really dumb in retrospect. I think he believed his intellectual superiority combined with the stupidity of others so much that eventually he couldn’t imagine anyone catching him.
I sadly see this pattern of thinking far more often than I want to in my fellow eastern Europeans.
It seems to be common occurrence. I still can't get over that one hacker who dumped stolen data on forum, to sell it/prove his capabilities, in form of tar.gz archive, that accidentally included his entire home directory
The only upside here is that criminals will (through legislation) eventually force companies to invest more.
The US is unique with its high salaries for tech work (on the lower end of those of high salaries is pure ops work like this though). If you're in a country where the average sysadmin salary is substantially lower (to pick on Eastern Europe for a minute, you're looking at the equivalent of ~$30-35k USD/year), it's not hard to see why its tempting to go the cybercrime route.
To put it somehow dimplomatic :-D
This is a disingenuous claim. Not only are there software engineers in rich western European countries that in absolute terms earn less than that but also your east European software engineer still earns multiple times their country's average salary.
That said I don't think there are many good software engineers that earn less than that in Western Europe. Net maybe, but certainly not gross, and if it's net that covers anything from pension security to healthcare, meaning you can live a decent life in most places.
I'm pointing out that this reasoning doesn't pass the smell test. A 30k salary in those countries actually represents between 5-to-10x your average salary. You are already considered rich and we'll off and leading a comfortable life.
It's like claiming your average FANG engineer earning half a million a year would be easily tempted to engage in criminal activity if that meant they could aspire to earn a few millions instead.
> (...) meaning you can live a decent life in most places.
Yes, there are only a few countries on earth where your average software engineer earns more than that, and mostly because their average salary and cost of living is already way larger. Some sources even state that the average salary of s software engineer in Japan is as low as $36k/year. Japan has a higher cost of living than most east European countries, they have a reputation of competence and technical expertise, and still you don't see Japan as synonymous with cybercrime.
Some people are ready to die for their beliefs. Others just to run businesses supporting their causes.
3 of the 4 persons named have russian links (a large number of Moldovan citizens are ethnic russians).
Really? Because while I've seen this, rarely, in individuals. In many cases once you start tracing money the amounts involved in many "die for their beliefs" situations is absurd. Terrorism, for example.
And there is also a thrill of doing it, which other guys already mentioned.
I would rather advise thinking of these efforts as various cybercriminal groups going through the schlep of setting up their own backend IT infrastructure for their own use (because they couldn't find anyone to host them); and then, with built infra in hand, either:
1. realizing that their own needs were emblematic of a more-general unmet market demand for "don't ask, don't tell" hosting, and so branching out into hosting as a secondary business;
2. taking the charade of a hosting company they made up when e.g. registering for an ASN, and deciding that the more real they make that charade, the more it protects them; and so slapping together a facade of a hosting site (that serves no real customers and has no real control-plane);
3. or deciding that having real customers with actual legitimate traffic coming from their ASN further legitimizes them (and makes other ASNs more wary to just block them wholesale), and so actually standing up the facilities of your average VPS provider on some single sad box somewhere — probably running some turn-key IaaS appliance (usually not OpenStack, more likely some shoddy old thing they bought on a cybercrime marketplace);
4. or (and I think this is the most common route) chatting with cybercriminal friends of theirs, and those friends hitting them up for hosting when they realize that they've actually built something out for themselves; and this gradually just evolving into a de-facto hosting arm of the business (as they accept more of these "high-touch" word-of-mouth customers; eventually begin to feel burdened by manually configuring their systems to accommodate these customers; and so begin to automate things.)
Same reason for CIA and NSA engineers.
jarvis, whats the status of my dutch servers
What is it about the Netherlands that makes them so attractive to these people?
Most of the tor nodes in Netherlands are actually physically in Netherlands.
Zero (not a guess)
The fuck, i walk past the office of mirhosting every day
Would have loved to read that article.