Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Anonymous Launches “Largest Attack Ever on Government and Music Industry Sites”

Anonymous Launches #OpMegaupload, Launches Massive DDoS Attacks Against Multiple Targets in Retaliation for Action Against Megaupload.Com

The Anonymous collective moved swiftly today, in response to actions taken by the Justice Department against operators of Megaupload.com, a wildly popular file sharing and online storage service.

Anonymous Launches #OpMegaupload, Launches Massive DDoS Attacks Against Multiple Targets in Retaliation for Action Against Megaupload.Com

The Anonymous collective moved swiftly today, in response to actions taken by the Justice Department against operators of Megaupload.com, a wildly popular file sharing and online storage service.

Anonymous #OpMegaUpload Launches DDoS Attacks

The Department of Justice said that seven individuals and two corporations have been charged with running a criminal enterprise allegedly responsible for “massive worldwide online piracy of numerous types of copyrighted works.” The site has been taken down and assets and domain names have been seized by authorities.

In response, the hacktivist collective clenched its virtual fist and launched what it says will be the “largest attack ever on government and music industry sites.”

Anonymous DDos Attacks Protest Megaupload.Com

The main tool powering the efforts of Anonymous to take its targets offline is the Low Orbit Ion Cannon (LOIC), a favorite tool used by “members” to conduct DDoS attacks by sending a flood of TCP/UDP packets in an attempt to overwhelm a system and make it inaccessible.

Via Twitter, it’s evident that today’s action against MegaUpload has sparked many more individuals to get involved in the online protests and download the LOIC to take part in the DDoS attacks. Chatter on Twitter and IRC is extremely active, and the attacks are likely to continue for some time.

“We Anonymous are launching our largest attack ever on government and music industry sites,” the group said in an online note. “Lulz. The FBI didn’t think they would get away with this did they? They should have expected us.”

Already, the group has targeted and taken down most of the following sites, at least for some period of time. Some appear to be sporadically accessible. It’s not the first time these sites have been hit with DDoS attacks, and while some were taken down, they often kick over to cloud based services or implement other DDoS mitigation actions until the attacks subside.

Advertisement. Scroll to continue reading.

justice.gov | hadopi.fr | universalmusic.com | riaa.org | mpaa.org | copyright.gov | wmg.com | usdoj.gov | bmi.com | fbi.gov

“DDoS is to the Internet what the Billy club is to gang warfare: simple, cheap, unsophisticated and effective,” said Rob Rachwald, Director of Security Strategy at Imperva. “But DDoS lends itself well to the Anonymous model which relies on crowd sourcing. During Operation Payback, Anonymous inspired an army of thousands in an attempt to bring numerous commercial sites.”

According to the Department of Justice, Megaupload.com and other related sites generated more than $175 million in profits through ad revenue and premium memberships, while causing more than $500 million dollars in damage to copyright owners. While the DOJ did not elaborate on how these figures were calculated, it did say the case is among the largest criminal copyright cases ever brought by the United States.

The indictment states that the conspirators promoted the uploading of popular copyrighted works including movies, music, television programs, electronic books, and software on a massive scale so that millions of users could download the content.

The individuals and two corporations – Megaupload Limited and Vestor Limited – were indicted by a grand jury in the Eastern District of Virginia on Jan. 5, 2012, and charged with engaging in a racketeering conspiracy, conspiring to commit copyright infringement, conspiring to commit money laundering and two substantive counts of criminal copyright infringement. As part of the crackdown, authorities executed more than 20 search warrants in the U.S. and eight countries, and seized approximately $50 million in assets. Agents also seized several Megaupload servers and a U.S. ordered the seizure of 18 domain names connected to the operation.

Megaupload.com claims it had more than 150 million registered users and 50 million daily visitors to its site, accounting for four percent of total Internet traffic.

The individuals charged each face a maximum penalty of 20 years in prison on the charge of conspiracy to commit racketeering, five years in prison on the charge of conspiracy to commit copyright infringement, 20 years in prison on the charge of conspiracy to commit money laundering and five years in prison on each of the substantive charges of criminal copyright infringement.

More details on the actions taken and those involved are available here.

Written By

For more than 15 years, Mike Lennon has been closely monitoring the threat landscape and analyzing trends in the National Security and enterprise cybersecurity space. In his role at SecurityWeek, he oversees the editorial direction of the publication and is the Director of several leading security industry conferences around the world.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

Shaun Khalfan has joined payments giant PayPal as SVP, CISO.

UK cybersecurity agency NCSC announced Richard Horne as its new CEO.

More People On The Move

Expert Insights

Related Content

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Cybercrime

As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.

Cybercrime

Luxury retailer Neiman Marcus Group informed some customers last week that their online accounts had been breached by hackers.

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.

Artificial Intelligence

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cybercrime

Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.