back to article Nice SECURITY, 'Lizard Squad'. Your DDoS-for-hire service LEAKS

A DDoS-for-hire service purportedly set up by the Lizard Squad hacking crew exposes registered users' login credentials. The LizardStresser DDoS-on-demand service – a booter service powered by hacked home routers – is hopelessly insecure. Details of more than 14,000 prospective users - whose passwords and usernames were …

  1. Anonymous Coward
    Anonymous Coward

    A misdirection play?

    I wonder if this is in some way a ruse to hide Lizard Squad's real customers? Either that, or Lizard Squad are nitwits, on top of being corrupt.

    1. Fred Flintstone Gold badge

      Re: A misdirection play?

      I think it's more evidence of the usual asymmetry in security: it's easy to break things, and hard to protect against people whose sole talent is to break things.

  2. Anonymous Coward
    Anonymous Coward

    Script Kiddies

    This modern day "hacker" is often nothing much more than some kid who runs a script written by someone else. I am investigating a case at the moment that is almost comical in the naïveté of the attackers. Using a server that can be directly traced back to the attackers to send out Mailbombs. And they seemed surprised when they got caught.

    These kids seem to get confused by knowledge. Just because they can perform a task it does not mean they know what they are actually doing. Certainly does not surprise me that they end up leaving a trail a mile wide leading straight back to them.

    1. Robert Helpmann??
      Facepalm

      Re: Script Kiddies

      Why would anyone be surprised when this or any pay-for-hire malware is crap at security? After all, the writers are purportedly good at breaking security, not implementing it. Sounds like they followed the three steps to becoming a script kiddy:

      1) Cut

      2) Paste

      3) Hope

  3. Mark 85
    Coffee/keyboard

    Got a nice chuckle, sprayed some coffee, and cleaned the keyboard on this. The "elite hackers" indeed.

    1. Destroy All Monsters Silver badge
      Paris Hilton

      "lel-lite", perchance?

  4. Little Mouse
    Childcatcher

    Teenage kicks

    Do Plod really tend to kick people's doors in at around 04:00 when their target is most likely to be fast asleep?

    I can see that ploy backfiring....

    1. Destroy All Monsters Silver badge
      Big Brother

      Re: Teenage kicks

      Mornings raids have been standard operating procedure since at least Napoleon and definitely since long leather coats could be mass-produced.

    2. Chris 244

      Re: Backfiring

      http://www.cbsnews.com/news/man-unlikely-to-face-charges-after-allegedly-shooting-police-chief/

    3. Allan George Dyer

      Re: Teenage kicks

      Yes. Apparently most people will answer simple questions, like, say, "What's your password?", honestly when half-asleep.

      1. Little Mouse

        Re: Teenage kicks

        Misunderstanding - I don't doubt the effectiveness of such tactics in general. I was questioning the likelihood of teenage hackers actually being asleep in bed like the rest of us during the early hours - as opposed to being fully awake and alert.

        I'll try not to be so vague next time(!)

  5. yoganmahew

    Will the list be published?

    It'd be interesting to see how many customers from company A want a DDos on company B and vice-versa...

    1. Anonymous Coward
      Anonymous Coward

      Re: Will the list be published?

      Sure to be - the world is full of knave loops: this diagram shows the eternal circle of backstabbers (and just how far ahead it gets them)

      Escher did that from intuition alone, but with this data set perhaps we can arrive at a rigorous algebra of bastardry: if A shits on B and B shits on C then can we say A shits transitively on C? And then work towards the minimal spanning tree of scumbags?

      1. Geoffrey W

        Re: Will the list be published?

        If A shits on B and B shits on C then surely we can say that A is helping C, not shitting on it, since the enemy of my enemy is my friend?

        B must be a seriously bad dude since he has no friends.

        1. Destroy All Monsters Silver badge
          Headmaster

          Re: Will the list be published?

          WRONG! The theorem of absolute shittyness states that there must be a most shitter element that is the supremum of the pile and so high up the ladder that shit projections can no longer reach him, given that: the most shitter element has strong political connections, mass media "reporting" is overall shit-tier and nobody gives a shit anyway.

  6. Anonymous Coward
    Anonymous Coward

    "This is Bubba. He'll be your cellie for the next 5-7 years."

    "Bubba, this is the guy that took down the Playstation Network. Hey, weren't your kids driving their momma crazy because they couldn't get online"

    to el Li-zard "I'm sure you and Bubba have alot to talk about."

  7. Alan Bourke

    What's worrying to me ...

    ... is that if you accept that these hackers are clueless, then Sony et al can get hacked by clueless people

    1. Anonymous Coward
      Anonymous Coward

      Re: What's worrying to me ...

      if you accept that these hackers are clueless, then Sony et al can get hacked by clueless people

      Well, yes, which was a good indicator of the quality of their security. Or more of the absence thereof.

      As I said before in those discussions, I now seriously regret not getting a PS/4 and getting hacked because making SONY's life miserable would be the *perfect* game for me, more than any other title they have. There's so much stuff you can throw at them that it's hard to decide where to begin and they have annoyed me enough over time with their shenanigans to make me draw this out for a loooooong time.

      I'm not normally that sadistic, but I am in one of the two groups of people you should avoid annoying, namely lawyers and security specialists, especially those with a dark sense of humour. Both specialise in finding weak spots, and the ones with a sense of humour are far less predictable to boot.

      Damn.

  8. Bleu

    Entrapment

    Maybe this is Hector 'Sabu' Monsegnor or Andrew 'weev' Auernheimer's latest project for their new boss.

    I was surprised to see that weev's case was thrown out late last year.

    Results from a quick search were led by claims that he now wears a white hat and breathless articles about what a hero for the cause he is, apparently his release ranks up there with that of Solzhenitzyn.

    Not that I don't think weev's sentence was overly harsh for the case *he was tried for*, my opinion would be a little different re. some of his other exploits, sure, perhaps he just made it all up.

    Very odd to have the case dismissed entirely.

    Rat Sabu is also said to be a hero according to the top hit in a search for 'Sabu'. This is because, to paraphrase, he is a Puerto Rican bro from 'the projects', not some white guy.

    Just checked, Ryan Cleary was also quietly released under odd circumstances, running a large for-profit botnet for hire and theft apparently isn't a problem once you make the right deal.

    Lizard Sec seems to be so brain-dead and so obviously modelled on Lulzsec, it just *has* to be a set-up of some kind: recruitment, a morality play (where they end up with their own Sabu, or even Sabu doing a reprise), a guided DDOS operation against non-USA governments and businesses ...

    Other suggestions please.

  9. Anonymous Coward
    Anonymous Coward

    Does this make anyone else wonder

    if the Lizard Squad is a front for the NSA?

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like