National Crime Agency
International operation shuts down notorious cyber crime website
A website linked to more than four million cyber attacks across the globe, including attacks targeting some of the UK’s biggest banks, has been shut down following an investigation led by the National Crime Agency (NCA) and the Dutch National Police, in collaboration with international law enforcement partners.
Authorities in five countries including the Netherlands, Serbia, Croatia and Canada, with support from Police Scotland and Europol, targeted six members of the crime group behind webstresser.org on Tuesday 24 April. Dutch police, with assistance from Germany and the United States then seized servers and effected a takedown of the website at 11:30am this morning.
Cyber criminals across the world have used webstresser.org, which could be rented for as little as $14.99, to launch in excess of 4 million so-called distributed denial of service (DDOS) attacks, in which high volumes of internet traffic are launched at target computers to disable them. Individuals with little or no technical knowledge could rent the webstresser service to launch crippling DDOS attacks across the world.
As part of the operational activity, an address was identified and searched in Bradford and a number of items seized. NCA officers believe an individual linked to the address used the webstresser service to target seven of the UK’s biggest banks in attacks in November 2017. They were forced to reduce operations or shut down entire systems, incurring costs in the hundreds of thousands to get services back up and running.
Officers from the NCA’s National Cyber Crime Unit (NCCU) identified criminal infrastructure in the Netherlands as part of an ongoing campaign against ‘DDoS-for-hire’ services, and worked closely with the Dutch National Police to identify the crime group behind the site and execute the coordinated law enforcement operation.
Stressers and booters are for-hire services that provide access to DDoS botnets – networks of malware-infected computers which are then effectively sub-let. They are often hidden behind a veil of authenticity in that they claim to have legitimate use to test the resilience of servers, but in reality are used by cyber criminals to ‘stress’ anybody. It’s this ‘stress’ that causes the disruption to services.
Jo Goodall, Senior Investigating Officer at the NCA said:
“A significant criminal website has been shut down and the sophisticated crime group behind it stopped as a result of an international investigation involving law enforcement agencies from eleven countries.
“Cyber crime, by default, is a threat that crosses borders and our response must be one that utilises the close international law enforcement collaboration that is crucial to tackling this threat. The arrests made over the past two days show that the internet does not provide bullet-proof anonymity to offenders and we expect to identify further suspects linked to the site in the coming weeks and months as we examine the evidence we have gathered.
“Cyber offenders can act against UK targets from anywhere in the world and this means UK-based offenders can also attack targets in any country. Our success depends on law enforcement, government and industry working together to fight cyber crime.
“Over the last year we have seen how cyber attacks have real-world consequences; resulting in actual physical harm as well as causing reputational and financial damage to businesses of all sizes. The cyber threat is constantly evolving and we are improving our tactics and capabilities in response. But businesses and individuals must report cyber crime - the earlier people report, the quicker we are able to assess new methodologies and limit the damage they can have.
“The Action Fraud website – www.actionfraud.police.uk – is the UK’s national fraud and cyber crime reporting centre and there’s also advice and guidance on how to mitigate against cyber attacks on the National Cyber Security Centre’s website www.ncsc.gov.uk”.
Dan Crisp, Director (Interim) Technology and Digital Policy, UK Finance said:
“Cybercrime is costing UK firms billions and has the potential to seriously disrupt our economy and wider society.
“The industry is hugely supportive of multilateral law enforcement programmes, which can effectively disrupt both cyber-criminal activity and illegal operations and help protect customers from attacks.”
“Our ‘Staying Ahead of Cyber Crime’ report demonstrates the importance of strategic collaboration with external agencies including the National Cyber Security Centre, National Crime Agency and police forces, in order to be more effective about tackling the ever-increasing cybercrime threat.”
Gert Ras, Head of the National High Tech Crime Unit at the Dutch National Police said:
“By taking down world’s largest illegal DDOS seller in a worldwide joint law enforcement operation based on NCA intelligence, we have made an unprecedented impact on DDOS cybercrime. Not only were the administrators of this illegal service arrested, but also users will now face prosecution and civil liability for caused damage.
“This is a warning to all wannabee DDOS-ers - do not DDOS because through close law enforcement collaboration, we will identify you, bring you to court and facilitate that you will be held liable by the victims for the huge damage you cause”.
Latest News from
National Crime Agency
Seven arrests as NCA dismantles Albanian people smuggling network suspected of bringing hundreds to the UK21/07/2021 12:15:00
Seven people have been arrested as part of a National Crime Agency operation aimed at dismantling an organised crime group involved in transporting hundreds of Albanian migrants to the UK illegally
Seven British fugitives arrested in Spain in just three weeks21/07/2021 10:10:00
Seven British fugitives have been arrested in Spain in the space of just three weeks as a result of joint operations between the National Crime Agency and the Spanish National Police.
Eight arrested in Greece as Project Invigor targets major international people smuggling network21/07/2021 09:10:00
Officers from Project Invigor, the National Crime Agency-led taskforce targeting organised immigration crime, have taken part in an operation which has seen eight members of a major people smuggling network arrested in Greece.
Former British overseas territory First Minister jailed for grooming and sexually abusing five girls20/07/2021 12:20:00
A former First Minister of the British overseas territory of Montserrat has been jailed for 15 years, after he was convicted of sexually exploiting five girls including two 13 year olds.
38 arrested as national law enforcement drive targets child traffickers19/07/2021 14:38:00
Around 100 potential victims have been identified and 38 people arrested following a week long law enforcement crackdown targeting child traffickers.
Joint operation leads to capture of six fugitives wanted for modern slavery, human trafficking and people smuggling offences overseas16/07/2021 15:43:00
A week-long joint operation involving the National Crime Agency’s International Crime Bureau and the police National Extradition Unit (NEU) has led to the capture of six wanted fugitives across the UK.
NCA recovers £2m from London-based property developer and landlord16/07/2021 14:48:00
London based property developer Richard Leahy has agreed to hand over assets worth almost £2 million to settle a civil recovery claim based on alleged involvement in cannabis cultivation, money laundering and fraud.
Lorry driver charged following 40 kilo cocaine haul16/07/2021 11:15:00
A Serbian lorry driver has been charged with drug smuggling offences by National Crime Agency officers after cocaine worth £3.2 million was found in a lorry heading to the UK.