Cyber Security

Authorities Arrested DDoS Attack Service Provider

A 24-year-old Katy, Texas resident, has been sentenced to nine months in federal prison for running a website that facilitated powerful distributed denial of service (DDoS) attacks.

The sentencing, handed down by United States District Judge Michael W. Fitzgerald, includes two years of supervised release with stringent conditions, including a comprehensive computer monitoring program.

The Rise and Fall of Astrostress.com

According to the US Justice government reports, from 2019 to September 2022, Esparza operated and co-administrated a DDoS-for-hire service known as “Astrostress.com” alongside Shamar Shattock, 21, of Margate, Florida.

The website allowed paying users to launch DDoS attacks, which flood targeted computers with excessive information, rendering them unable to access the internet.

This type of service, often referred to as a “booter” service, was marketed to customers worldwide, enabling them to disrupt the operations of internet-connected computers across the globe.

Protect Your Business Emails From Spoofing, Phishing & BEC with AI-Powered Security | Free Demo

Astrostress.com offered various subscription levels based on the number and power of attacks customers wished to execute.

Esparza was crucial in procuring the attack servers, maintaining the site’s functionality, and assisting with marketing efforts. He also hired a co-conspirator to manage customer support.

Despite not owning or having authorization to use the third-party computers exploited for these attacks, Esparza was aware that his customers were using the service to target unauthorized computers.

Esparza pleaded guilty on March 6 to one count of conspiracy to commit unauthorized impairment of a protected computer and one count of unauthorized impairment of a protected computer.

His actions led to tens of thousands of protected computers being attacked and impaired, causing significant disruptions.

In a desperate attempt to cover his tracks, Esparza instructed Shattock to clear all his social media accounts to avoid detection shortly after the FBI shut down Astrostress.com in September 2022.

Shattock, who also played a key role in the operation, pleaded guilty in March 2023 to one felony conspiracy count. He faces up to five years in federal prison, with his sentencing hearing expected in the coming months.

Operation PowerOFF: A Multi-National Effort

The FBI’s investigation into Astrostress.com was part of Operation PowerOFF, a multi-national initiative aimed at combating DDoS-for-hire services.

This operation highlights the collaborative efforts of law enforcement agencies worldwide to tackle cybercrime and protect internet infrastructure.

Assistant United States Attorneys Cameron L. Schroeder, Chief of the National Security Division, and Aaron B. Frumkin of the Cyber and Intellectual Property Crimes Section prosecuted the case.

Additionally, Assistant United States Attorney James E. Dochterman of the Asset Forfeiture and Recovery Section is handling the seizure of the Astrostress domain.

The sentencing of Scott Raul Esparza serves as a stark reminder of the legal consequences of engaging in cybercrime.

As authorities continue to crack down on DDoS-for-hire services, the message is clear: those who exploit the internet for malicious purposes will be held accountable.

Join our free webinar to learn about combating slow DDoS attacks, a major threat today.

Dhivya

Divya is a Senior Journalist at Cyber Security news covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Russian Cybercriminal Charged in $24 Million Qakbot Ransomware Scheme

The U.S. Department of Justice unsealed federal charges Thursday against Russian national Rustam Rafailevich Gallyamov,…

4 hours ago

Bypassing Zero-Trust Policies to Exploit Vulnerabilities & Manipulate NHI Secrets

A comprehensive security research demonstration has revealed how attackers can systematically undermine modern zero-trust security…

8 hours ago

Threat Actor Allegedly Selling Burger King Backup System RCE Vulnerability for $4,000

A cybersecurity threat has emerged targeting one of the world's largest fast-food chains, as a…

8 hours ago

GenAI Assistant DIANNA Uncovering New Obfuscated Malware

The cybersecurity landscape witnessed a significant milestone this February with the emergence of BypassERWDirectSyscallShellcodeLoader, a…

9 hours ago

Hackers Attacking macOS Users With Fake Ledger Apps to Deploy Malware

Cybercriminals are increasingly targeting cryptocurrency users through sophisticated malware campaigns that exploit the trust placed…

9 hours ago

New Formjacking Malware Attacking E-Commerce Pages to Steal Credit Card Data

Cybersecurity researchers have uncovered a sophisticated new formjacking malware campaign targeting WooCommerce-powered e-commerce websites, representing…

13 hours ago