DDOS Attack?

[jonesj3599]

Ok, I know this idea sketchy, but what about a launching a DDoS campaign against the Rogue AV (scareware) people.

Step 1: We find their payment server's IP. Verify they always use that IP.

Step 2: We verify it isn't a legit payment system. (if it is then we simply inform them about what their client is doing)

Step 3: If it's not a legit payment system (one they setup specifically to steal C/C numbers) we setup a program to use a computer's downtime to spam random C/C info to the site, and distribute it to volunteers. That way they have to sift through the invalid C/Cs to find the real ones.

I know it's sketchy, and might border on illegality, but it would certaintly jack them up a bit eh?

Of course the hard part would be bypassing any anti-DoS protection they have. Which would probably mean hacking their Rogue AV software....

[DarkSnakeKobra]

Hi jonesj3599 and welcome to malwarebytes.

I don't think that's a good idea. A similar event happened awhile back ago with Bluepoint and they closed their doors because of this. They decided to spam the spammers severs and bog them down. But they threated Bluepoint with millions of Bot nets(with viruses) that would attack and they closed because it wasn't worth it.

Edit: Just found the link. http://www.washingtonpost.com/wp-dyn/conte...6051601873.html

[noknojon]

I know it's sketchy, and might border on illegality, but it would certaintly jack them up a bit eh?

Of course the hard part would be bypassing any anti-DoS protection they have. Which would probably mean hacking their Rogue AV software....

I got one recently (I won the lottery) and was advised to forward it to the FBI for investigation - I did not get any reply (did not expect one) , but that was the advice from MysteryFCM about rogues or spammers that do have a reply address -