Feeds

Face of Mankind DoS teen perp reprimanded

Stupid boy

Securing Web Applications Made Simple and Scalable

A UK teenager who admitted launching a denial of service attack on online multiplayer game Face Of Mankind has been reprimanded by police.

The 16-year-old, who can't be named for legal reasons, launched the relatively unsophisticated SYN Flood attack throughout May 2007. As a result, Face Of Mankind's portal was regularly unavailable during the assault.

A police investigation led by Scotland Yard's Computer Crime Unit led to the arrest of the computer studies student in London in October 2007. He admitted responsibility, stating that he and his friends launched the attack after deciding to "take down" the forum over dissatisfaction about the way it was been run. The teenagers co-ordinated their attack on MSN instant messenger.

During the attacks, the teenager logged into the forum and switched over to "invisible" mode, naively thinking this would hide his actions from the site's administrator. These actions led to his undoing, allowing technicians from network analysis and forensics firm Synerity Systems to track down his location in the UK, prior to handing over the case the detectives from Scotland Yard. Synerity Systems was hired by game publishers Ojom to look into the attacks.

Jasper Bongertz explained that the bulletin boards affected by the attack played an integral part of the game: "The bulletin boards were flooded with requests for pages, causing them to go down.

"After we placed a sniffer in front of the servers we found that the attack were coming from one single IP. The same IP was included in the user list for the bulletin board, which gave us an email address. The suspect email address was tied to a subscription to the game which gave us a name and address.

"The attacker was pretty stupid," Bongertz added.

Before it introduced subscription Face Of Mankind boasted 10,000 users. At the time of the attacks it had about 1,500 users. The assaults made the game virtually unplayable and its user base drifted away. Ojom, the publisher of the game, has since taken it down in the face of further assaults which proved more difficult to track down.

"The later attacks were by more professional people using botnets. Finally the game was stopped because those attacks cost money," Bongertz told El Reg. Developers are trying to resurrect the game.

Face Of Mankind's portal is based in Germany. The teenager involved in the attack was read the riot act by police on 24 December but details of the assault, and how he was tracked down, have only just emerged. ®

The smart choice: opportunity from uncertainty

More from The Register

next story
Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade
Misc memory hazards 'could be exploited' - and guess what, one's a Javascript vuln
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Don't look, Snowden: Security biz chases Tails with zero-day flaws alert
Exodus vows not to sell secrets of whistleblower's favorite OS
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.