a survey of stresser customers: the new script...
Post on 29-Jun-2018
228 Views
Preview:
TRANSCRIPT
A survey of stresser customers: The new Script Kiddies?
Thomas S. Hyslip
Thomas.hyslip@dodig.mil
919-274-4526
Booters and Stresser Services
• Hutchings & Clayton (2016) surveyed Booter operators
• Karami, Park and McCoy (2015) examined the business structure of Booter and Stresser Services by intervening with the payment processors, such as Paypal
• Santanna, Rijswijk-Deij, Hofstede and Sperotto (2014) measured the bandwidth and packets size of Booter and Stresser DDoS attacks
• Rossow (2014) identified 14 protocols for Amplification attacks and millions of vulnerable amplification servers.
Present Study 15 Stressers
• DDOS City
• Device Stresser
• Galaxy Booter
• Hostiles Booter
• Jays Stresser
• Legion Booter
• Lizard Stresser
• Network Stresser
• Nulled Booter
• P0wned Stresser
• Phantom Stresser
• Quantum Stresser
• Rage Booter
• Space Booter
• Unknown Stresser
Email Address analysis
• 51909 User’s Email
• 514 registered with 2 Stressers
• 14 registered with 3 Stressers
• Gmail: 18571: 36%
• Hotmail: 11540: 22%
• Yahoo: 5273: 10%
• Live: 1590
• Aol: 878
• Outlook: 833
• GMX: 384
• Mail.ru: 372
• Yandex.ru: 202
68%
Survey of Users
• 51909 Emails sent (Dec 2016)• 8018 bounced / not valid
• 5226 opened
• 821 respondents
(1.87% response rate)
• 84 Follow up requests
• 23 Questions
• Skill level
• Usage
• Payments
• Targets
• Attack Types
• Demographics
What is your knowledge and skill level with Stresser / Booter Tools and Services?
0
50
100
150
200
250
300
1 (noob) 2 3 4 5 6 7 8 9 10(expert)
30% Experts16% Noob
Have you ever used a Stresser or Booter
222
27
Yes No
89% Yes
Did you pay a fee to use the Booter or Stresser?
142
76
0
20
40
60
80
100
120
140
160
Yes No
How did you pay for the Stresser
0 20 40 60 80 100 120
Webmoney
Other Crypto Currency
Other Web Currency
Bitcoin
Paypal
Where you able to use the Stresser or Booterto test systems?
32
208
No Yes
87%
Did the Booter or Stresser work as advertised?
178
61
Yes No
26%
74%
How many systems / servers did you test?
1 2 3 4 5 6-10 More than 10
Series1 41 19 23 12 8 19 110
0
20
40
60
80
100
120
Type of Attack utilized
0
20
40
60
80
100
120
140
160
180
108 100
140
40 48
71
48 46
107
167
20 28
5442 36
72
What was the motivation behind your use of the booter / stresser
113
109
95
59
55
44
0 20 40 60 80 100 120
Research
Test my abilities
Affect Game / game opponent
Hacktivisim (protest)
Other
Hired to do so
What did you use the Stresser On?
135
116
61
121
41
84
0 20 40 60 80 100 120 140 160
Yourself
Game
Business Server(non website, such as Email or File Server)
Website / Webserver (private / commercial)
Website / Webserver (government)
Other
How many different Stressers / Booters did you use or have accounts with
19
39
59
38
12
69
0
10
20
30
40
50
60
70
80
0 1 2 3 4 5 or more
Have you ever operated your own Stresser / Booter
129
105
Yes No
55% Yes
Have you assisted with the operation of a Booteror Stresser, or recruited members, posted ads?
81
150
0
20
40
60
80
100
120
140
160
Yes No
35%
65%
Have you ever been the target of a Stresser
182
54
0
20
40
60
80
100
120
140
160
180
200
Yes No
In what country do you live?
2 2 2 1
13
1 1 14
15
10
1 1 3 3 1
11
16
1 2 1 1 1 1 1
74 3 1 2 2 1 1 2 1 1 3 2 2 1
28
91
2 10
10
20
30
40
50
60
70
80
90
100A
fgh
anis
tan
Alb
ania
Alg
eria
An
do
rra
Au
stra
lia
Au
stri
a
Bah
amas
Be
laru
s
Be
lgiu
m
Be
nin
Bra
zil
Can
ada
Ch
ina
Cro
atia
Cze
ch R
epu
blic
Den
mar
k
Eth
iop
ia
Fran
ce
Geo
rgia
Ger
man
y
Gre
nad
a
Ind
ia
Isra
el
Jord
an
Lith
uan
ia
Mad
agas
car
Mex
ico
Net
her
lan
ds
New
Zea
lan
d
No
rway
Ph
ilip
pin
es
Po
lan
d
Po
rtu
gal
Ru
ssia
n F
eder
atio
n
Sier
ra L
eon
e
Sin
gap
ore
Slo
ven
ia
Spai
n
Swed
en
Swit
zerl
and
Turk
ey
Un
ited
Ara
b E
mir
ates
Un
ited
Kin
gdo
m
Un
ited
Sta
tes
of
Am
eric
a
Vie
tnam
Zim
bab
we
If USA, What state do you reside in?
2
1 1
15
2 2 2
6
3
5
2
1
2
3
2 2 2
4
1 1 1
6
1
5
3
2
4
3
2 2
1
4
1
4
1 1
0
2
4
6
8
10
12
14
16
Ala
bam
a
Ala
ska
Ark
ansa
s
Cal
ifo
rnia
Co
lora
do
Co
nn
ecti
cut
Dis
tric
t o
f C
olu
mb
ia (
DC
)
Flo
rid
a
Geo
rgia
Illin
ois
Ind
ian
a
Iow
a
Kan
sas
Lou
isia
na
Mai
ne
Mar
ylan
d
Mas
sach
use
tts
Mic
hig
an
Mis
siss
ipp
i
Mis
sou
ri
Neb
rask
a
New
Jer
sey
New
Mex
ico
New
Yo
rk
No
rth
Car
olin
a
Oh
io
Pen
nsy
lvan
ia
Rh
od
e Is
lan
d
Sou
th C
aro
lina
Sou
th D
ako
ta
Ten
ne
ssee
Texa
s
Vir
gin
ia
Was
hin
gto
n
Wes
t V
irgi
nia
Wyo
min
g
What is your Age
0
5
10
15
20
25
30
35
0 10 20 30 40 50 60 70 80
Age
Race / Ethnicity
150
8
14
12
7
14
32
0 20 40 60 80 100 120 140 160
White / Caucasian
American Indian or Alaskan Native
Asian
Black or African American
Hispanic/Latino
Multiple ethnicity
Other
What is the highest level of education
0 10 20 30 40 50 60 70 80
Advanced degree (Master's, Ph.D., M.D.)
Bachelor's degree
Associate degree
Trade/technical school
some college, no degree
Graduated from high school
Less than high school
Gender
208
11 16
0
50
100
150
200
250
Male Female Transgender
88%
Native Indian or Alaskan Native Asian
Native Hawaiian or other Pacific Islander
Black or African American
Hispanic / Latino
White / Caucasian
Multiple ethnicity Other Total
Male 5 11 0 6 6 143 11 25 207
Female 1 3 0 3 0 2 1 1 11
Transgender 4 0 0 2 1 4 1 5 17
10 14 0 11 7 149 13 31 235
What is your knowledge and skill level with Stressers
1(Noob) 2 3 4 5 6 7 8 910 (Expert) Total
Have you ever operated your own Stresser Yes 3 0 1 0 5 8 14 10 7 56 104
No 5 2 6 7 21 15 17 25 6 25 129
Total 8 2 7 7 26 23 31 35 13 81 233
What is your Gender
Female Male Transgender Total
Have you ever operated Yes 8 88 9 105
your own Stresser No 3 117 6 126
Total 11 205 15 231
How many systems / servers did you test?
1 2 3 4 5 6-10 Over 10 Total
What was the motivation behind the use of the Stresser
System Testing 19 17 14 6 6 12 67 141
Research 15 11 11 4 4 11 61 117
Test my abilities 13 6 10 8 4 10 58 109
Affect Game / Opponent 7 2 4 7 4 7 61 92
Hactivisim / Protest 2 2 4 2 2 5 41 58
Other 7 1 5 3 3 4 32 55
Hired to do so 3 1 0 3 1 2 33 43
Affect Business Competitor 0 1 0 1 2 1 20 25
What is your knowledge and skill level with Stressers
1(Noob) 2 3 4 5 6 7 8 9 10 (Expert) Total
What did you use the Stresser onYourself 6 0 3 2 17 15 12 23 8 49 135Game 0 0 2 2 11 9 15 16 6 52 113
Business Server (non website, such as email or file server) 0 0 2 1 4 3 5 6 6 33 60Website / Webserver (Private / Commerical) 0 0 1 0 12 9 13 24 10 47 116
Website / Webserver (Gov't) 0 1 0 0 3 2 2 3 9 25 45Other 2 0 2 3 7 6 9 8 5 40 82
What was the motivation behind the use of the Stresser
ResearchSystem Testing
Affect Game / Opponent
Hactivisim / Protest
Affect Business Competitor Test abilities Hired to do so Other Total
What did you use the Stresser on
Yourself 84 106 42 35 17 69 31 33 417
Game 54 64 73 41 20 65 30 35 382
Business Server (non website, such as email or file server) 42 48 30 27 19 37 28 25 256Website / Webserver (Private / Commerical) 64 78 56 50 21 68 32 41 410
Website / Webserver (Gov't) 27 28 24 24 15 28 20 18 184
Other 42 49 44 30 19 47 24 42 297
Going forward
• Further analysis
• Follow up survey or interview of 84 respondents
• Adam Mudd, Titamium Stresser
• Vincent Omari, Lizard Squad “Spokesman”
Questions?
• Thomas Hyslip
• Thomas.hyslip@dodig.mil
• 919-274-4526
top related