The Government of Germany Closed Hacker Hosting FlyHosting

Daniel ZimmermannApril 5, 2023

0 80 2 minutes read

German law enforcement confiscated servers of the hacker’s hosting FlyHosting — a darknet resource intended for the organization of DDoS-attacks for hire.

I’ll remind you that I also wrote about American Authorities Closed the Bitzlato Cryptocurrency Exchange, Linking It with Conti and Hydra, and Law Enforcement Officers Closed the Underground WT1SHOP Marketplace That Sold Bank Cards and Credentials.

And also our colleagues wrote that BreachForums Closed Due to Fears That Law Enforcement Officers Gained Access to the Servers.

FlyHosting advertised on hack forums, declaring that it is open to all who are looking for a reliable place to host malware, manage botnets or DDoS infrastructure.

hacker hosting FlyHosting
FlyHosting Ad

The Federal Criminal Police Department of Germany (Bundeskriminalamt, BKA) reports that on March 30, 2023, eight search warrants were issued and five people aged 16 to 24 were identified, suspected of using a certain “internet service” since mid-2021. While the authorities do not reveal the names of the suspects, as well as the name of the internet service in question.

Previously, unknown criminals used an internet service provided by suspects, for example, to organize DDoS attacks.they declare in BKA.

The authorities report that as a result of DDoS-attacks organized by suspects in the period from the middle of 2021, the websites of various companies, as well as the websites of the Hessen police, were overloaded in several cases, “so that they could only be used to a limited extent or could not be used at all” .

The famous cyber journalist Brian Krebs writes that the first news about the raid on FlyHosting appeared last week, in particular, in the Telegram channel, which is often visited by people involved in the DDoS-attack industry for hire.

Flyhosting performed a “migration” of its systems to the new premises of the police ;). We expect the police to carefully examine files, payment logs and IP addresses. If you used their server, and [the police] can find “bad things” connected with you (paid through personal PayPal), you should contact a lawyer.a user with someone Dstatcc wrote.

In the statement of the authorities, it is said that during the searches, the police confiscated mobile phones, laptops, tablets, various information carriers and handwritten notes from the accused, as well as servers they operated in Germany, Finland and the Netherlands. Law enforcement officials confirmed to Brian Krebs that the confiscation and raids were connected precisely with FlyHosting.

Apparently, the actions against FlyHosting are connected with the large-scale international operation of law enforcement officers PowerOff, the main goal of which is the liquidation of criminal DDoS-infrastructures for hire around the world.

For example, at the end of 2022, as part of this operation, 48 domains were confiscated and closed, and charges were brought against six suspects who were involved in the management of DDoS-attack platforms for hire.

Also recently, the British National Crime Agency (NCA) reported that, as part of the PowerOff operation, it created a whole network of fake sites where it was allegedly possible to order a DDoS attack. In this way, NCA identifies people who want to use DDoS services and use these platforms for attacks.

Sending