US Charges Russian With Launching 2008 Amazon DoS Attack

← Back to Stories (view on slashdot.org)

US Charges Russian With Launching 2008 Amazon DoS Attack

Posted by timothy on Saturday July 21, 2012 @09:40AM from the break-open-the-emergency-thumbscrews dept.

The Seattle Times reports that Dmitry Olegovick Zubakha, "A Russian man believed to be behind cyberattacks on Seattle-based Amazon.com and other online retailers in June, 2008 has been arrested in Cyprus, says U.S. Attorney Jenny Durkan." Along with a partner, Sergey Vioktorovich Logashov (still at large), Zubakha apparently also undertook, and later bragged about, attacks on Priceline and Ebay. After extradition, he's expected to face trial in the U.S. for possession of illegal access devices, conspiracy, and aggravated identity theft.

58 comments

Min score:

Reason:

Sort:

Oops by colinrichardday · 2012-07-21 09:44 · Score: 1

This could get ugly
where does he work? by Anonymous Coward · 2012-07-21 09:47 · Score: 1

you don't suppose he's employed by that scum bag company that's always trying to shake down apple with the lame mac "viruses" do you?
Illegal access devices? by tragedy · 2012-07-21 09:50 · Score: 5, Insightful

What's an "illegal access device"? I always worry about the criminalization of tools.
1. Re:Illegal access devices? by artor3 · 2012-07-21 10:08 · Score: 4, Informative
  
  It's legalese for a stolen credit card.
2. Re:Illegal access devices? by geoffaus · 2012-07-21 10:08 · Score: 1
  
  Will the US be charging him for having a device that might not have been illegal in the country where he had it? Surely if its illegal in Cyprus then he should be charged there with having it - not in the US Also he was charged with possession of 28,000 credit cards - does this mean that if he had emailed it to people they could then be charged with possession too?
  
  --
  As an online discussion grows longer, the probability of a reference to Godwin's Law approaches 1
3. Re:Illegal access devices? by Anonymous Coward · 2012-07-21 10:09 · Score: 5, Funny
  
  He had 15 cereal whistles.
4. Re:Illegal access devices? by tragedy · 2012-07-21 10:25 · Score: 2
  
  Did he also have a Drogan's Decoder Ring?
5. Re:Illegal access devices? by Mashiki · 2012-07-21 11:40 · Score: 1
  
  I thought it was pathping and tracert. Safe for another day.
  
  --
  Om, nomnomnom...
6. Re:Illegal access devices? by justforgetme · 2012-07-21 23:22 · Score: 1
  
  What was wrong with the term "stolen credit card"?
  
  --
  -- no sig today
7. Re:Illegal access devices? by marcosdumay · 2012-07-22 06:21 · Score: 1
  
  What was wrong with the term "stolen credit card"?
  Anybody can understand it.
  
  --
  Rethinking email
8. Re:Illegal access devices? by Luthair · 2012-07-22 09:16 · Score: 1
  
  I really wonder how 'possession' of something outside the US could be a crime.
Thank goodness by Anonymous Coward · 2012-07-21 09:50 · Score: 1

Thank goodness we had a priceline negotiator to stop the attacks before it got too ugly.
Easily Misread by Ranguvar · 2012-07-21 09:55 · Score: 2

"Charges Russian"? Not man, not woman?
I was sure at first that the U.S. was making claims of the country Russia, and so prepared for big shit to go down.
Hubris or Greed by DarkOx · 2012-07-21 09:55 · Score: 2

Either Hubris or Greed seems to be the undoing of almost every high tech criminal that is actually caught. You'd think some of them would learn that lesson.
Really guys let me help you with this.
1. Hack site
2. Use stolen identities to flush corresponding bank accounts
3. SHUT THE *#*$(@) UP ABOUT IT
4. Profit
Notice there is no ??? step there. Everything after step 2 is simple really. The trick is take enough in step 2 that you don't need to repeat steps one and two again, and don't blab. If you complete one and two, and stop there you'll either be caught right away or very likely never caught at all.

--
Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
1. Re:Hubris or Greed by MRe_nl · 2012-07-21 10:06 · Score: 1
  
  http://www.youtube.com/watch?v=Tl0LZsyi_tA
  
  --
  "Kill 'em all and let Root sort 'em out"
I seriously can't wait... by Anonymous Coward · 2012-07-21 09:57 · Score: 0

... when this US dictate over what anyone on this world can or can not do will end. Call me a troll or hater or whatever but please, when that same Russian man bought those illegal unmentioned stuff (I have not read TFA) from ebay, the us was just too happy to pocket the cash. Well you know, every coin has two sides.
1. Re:I seriously can't wait... by CanHasDIY · 2012-07-21 10:14 · Score: 1
  
  Call me a troll or hater or whatever but please, when that same Russian man bought those illegal unmentioned stuff (I have not read TFA) from ebay, the us was just too happy to pocket the cash.
  Heh, reminds me of something I heard on a Chris Rock standup rerun last night...
  
  Drugs are illegal, but ATM machines are open 24 hours a day. 24 hours a day. For who? Who the fuck is it open for? Have you ever taken out $300 at four o'clock in the morning for something positive?
  
  --
  An enigma, wrapped in a riddle, shrouded in bacon and cheese
2. Re:I seriously can't wait... by santax · 2012-07-21 10:20 · Score: 1
  
  Actually, once I took about 2000 euro's from an ATM at 4 o'clock in the morning to pay for my USA Fender that would arrive the next day. At that time, that was about 10 million US dollars! Give or take a few cents.
3. Re:I seriously can't wait... by BlueStrat · 2012-07-21 11:14 · Score: 0, Offtopic
  
  Actually, once I took about 2000 euro's from an ATM at 4 o'clock in the morning to pay for my USA Fender that would arrive the next day. At that time, that was about 10 million US dollars! Give or take a few cents.
  Although I admire your taste in instruments (see my username), I would have recommended a G&L, which is what I play these days rather than a Fender.
  http://www.glguitars.com/
  G&L is actually more true "Fender" than Fender. G&L is George Fullerton and Leo Fender, the original founders of Fender Musical Instruments. Fender was bought out by CBS in 1968, although I'm not sure/haven't checked to see who owns Fender these days. Once the non-compete clause from the sale contract expired, they got up to their old musical tricks again.
  I own a G&L Legacy strat. Gorgeous, top-notch materials & workmanship, and sounds amazing. I'd take one over a current Fender American Standard or Fender American Deluxe Stratocaster any day.
  Strat
  
  --
  Progressivism (aka US 'Liberalism'): Ideas so good they need a police/surveillance-state to enforce.
4. Re:I seriously can't wait... by tftp · 2012-07-21 13:17 · Score: 1
  
  Have you ever taken out $300 at four o'clock in the morning for something positive?
  I seldom use cash, but when I do I might leave it up to the last minute to obtain the money. When I go on a 420 mile road trip I will need some cash with me. If I depart early I might stop by the bank at 4am, or 5am - easily. The same applies if I go to a flea market, they open at 6am.
  I would be far more suspicious of withdrawals at midnight or 1am. Very few people are out and about at that time. But 4 or 5am is already a viable time for early-rising honest workers and travelers. If your airplane departs at 6:30am and you need one hour to get there, and TSA insists that you allow at least two or three hours for them to molest you, how early would you be leaving your house?
5. Re:I seriously can't wait... by Anonymous Coward · 2012-07-21 13:25 · Score: 0
  
  Nothing like the UK and their browser preferences? I also didn't read the TFA but what is this US eBay site you refer to? I don't remember a deposit in my PayPal accout.
6. Re:I seriously can't wait... by Anonymous Coward · 2012-07-21 14:17 · Score: 0
  
  I seldom use cash, but when I do I might leave it up to the last minute to obtain the money. When I go on a 420 mile road trip I will need some cash with me. If I depart early I might stop by the bank at 4am, or 5am - easily
  420? you need the money for a pot road trip?
7. Re:I seriously can't wait... by tftp · 2012-07-21 15:13 · Score: 1
  
  If you have a specific joke in mind then it whooshed way above my head - I know nothing about drugs, cooking or road repairs. I specified the distance because that's what I saw on the odometer last time. I usually visit the same set of places and know the people there.
  Cash may be needed in various places to pay for services, in case plastic is not accepted. The longer the trip the higher is the chance that you hit some sharp object on the road and need a tire patched up or replaced. Most farmers who could help don't carry a Visa terminal in their trucks. If you choose to buy some fruits along the way the cash will get you more (just don't ask why it is so.) Of course Burger King will be happy with your plastic.
8. Re:I seriously can't wait... by santax · 2012-07-22 01:47 · Score: 1
  
  Yeah in retrospect I must say, the G&L would have been even more bang for the buck, but to me the Fender is also a bit of a legacy. My guitar-hero's use or have used them for some of the greatest songs ever (Sultans of Swing!). Anyway, I agree, but the one I got is still a great instrument. So I'm not complaining :) (and she is surf-green!)
Mice by Anonymous Coward · 2012-07-21 10:04 · Score: 0

When are they gonna bring back the kitten canon? That was fun!
Where is the jurisdiction? by BlueCoder · 2012-07-21 10:08 · Score: 2, Interesting

Were these people on US soil when they performed these acts?
Am I the only US citizen that is concerned about this?
Is Saudi Arabia now able to extradite me because I read playboy?
1. Re:Where is the jurisdiction? by Anonymous Coward · 2012-07-21 10:28 · Score: 0
  
  Only if you do it online, stick to the paper copy on U.S. soil and you'll be fine.
2. Re:Where is the jurisdiction? by Anonymous Coward · 2012-07-21 10:32 · Score: 2, Informative
  
  Were these people on US soil when they performed these acts?
  Am I the only US citizen that is concerned about this?
  Is Saudi Arabia now able to extradite me because I read playboy?
  The servers were. That's the point, you can do harm to people in another country and that country's government can say...hey, we don't like that, and your government (or another's) may respond accepting or rejecting it.
  You might be, but I doubt we'd be so lucky.
  No, because they don't have jurisdiction. I suppose they might try, but they'd have to be extra stupid that way, and I doubt the US judge would be stupid enough, though Scalia seems to be losing his tenuous grasp on sanity so I suppose you'd better hope it doesn't go before him.
3. Re:Where is the jurisdiction? by Charliemopps · 2012-07-21 10:37 · Score: 2
  
  Well, in a lot of cases I'd agree with you. For example, if he hosted some content on his Russian site that's illegal here and then someone here downloaded it... our current justice department seems to think that's fair game and would go after him. That's obviously an overreach of our government. Same with wikileaks.
  
  But in this case, this man alegedly used a computer network to attack, or hack, sites in the US. I'd liken it to someone using a remote controlled robotic arm to stab you. Even though they are in Russia, the robotic knife attack happens in the US. I'd say that's fair game for extradition. I think that, where things could get sketchy is where the user doesn't actually know which country the servers he's accessing are hosted. So you're in a country where online gambling is legal, and you go to some gambling site... only to later find out that it was hosted in the US and the US federal government is trying to extradite you for using the site...
4. Re:Where is the jurisdiction? by the+eric+conspiracy · 2012-07-21 11:24 · Score: 3, Interesting
  
  Why does being on US soil have anything to do with committing a crime against a US entity?
  People commit crimes. You don't have to be on US soil to commit very nasty crimes against US interests. For example Osama bin Laden was never on US soil AFAIK.
  Depending on the extradition treaties of the place they commit them from or later visit the US may or may not be able to bring them to trial. Sometimes the US may even use force of arms to bring such people to reckoning.
  It's called being a sovereign power.
  Obviously Cyprus is one of the places you don't want to visit after committing such a crime.
  > Am I the only US citizen that is concerned about this?
  No, but you are seriously in the minority.
  > Is Saudi Arabia now able to extradite me because I read playboy?
  Very unlikely since there is no extradition treaty between the US and Saudi.
5. Re:Where is the jurisdiction? by LazLong · 2012-07-21 12:02 · Score: 2
  
  One might think that the jurisdiction is that in which the damage occurred. i.e. if the servers were in the US, that is where it lies. This is simply an international attack, the same as mailing a bomb from one country to the next.
  There is a far too prevalent belief or ethic amongst the techno-educated from the former Soviet republics that it is their right to take advantage of whoever is 'stupid' enough to be vulnerable to their skills. This needs to come to an end. The Internet is not the cyber wild west. I am not saying that the US should be the marshal, let Interpol do it, or whoever. It just needs to be done.
6. Re:Where is the jurisdiction? by Anonymous Coward · 2012-07-21 13:37 · Score: 0
  
  You don't have to be on US soil to commit very nasty crimes against US interests.
  No, you don't, obviously. But the US' "interests" range from draconian copyright laws to killing whoever they damn well please.
7. Re:Where is the jurisdiction? by the+eric+conspiracy · 2012-07-21 14:28 · Score: 1
  
  > But the US' "interests" range from draconian copyright laws to killing whoever they damn well please.
  Draconian US copyright laws are not exclusively a US problem. Countries that don't resist them, especially in their extradition agreements are playing a part in this too.
  Extradition treaties are a two way street. If you don't sign one the US can't extradite people from your country.
  As far as killing whomever they want, that doesn't have anything to do with extradition treaties or copyright infringement.
  The US is in a very messy global soft war, and unfortunately shit happens if you prosecute such wars fully. And if you get into a war and don't prosecute it fully you end up doing more damage to both sides than if you do.
8. Re:Where is the jurisdiction? by rtb61 · 2012-07-21 14:45 · Score: 2
  
  The real question here is the form and method of extradition. The US has managed quite effectively and beyond doubt to soil it's legal reputation overseas. The US legal process is felt to have more in common with third world countries and crime gangs, having been corrupted by lobbyists, politicians and corporations. Perhaps a more solid review of the extradition process (they seem to spew out any kind of bullshit with only limited evidence or proof), the court process (far too much intimidation of other parties with threats of life imprisonment or death to force suspected false testimony) and finally associated punitive punishment (the routine and publicly accepted use of homosexual rape as punishment) or remedial training process.
  The US justice system instead of being a world leader especially with regard of foreigners (life time imprisonment until confession of guilt and routine torture), has come to be viewed as shite, well done The Shrub (Bush) and The Betrayer (Obama).
  Instead of extradition perhaps the trial should be held at the country where the person is being held, the accusing country should prove their case and dependent upon the nature of accepted penalties, the now guilty person should be penalised. The accusing country can pay for the process, including incarceration (costs subject to treaty). Where the accusing country fails to prove their case, they should pay full penalties to the defendant.
  
  --
  Chaos - everything, everywhere, everywhen
9. Re:Where is the jurisdiction? by Nyder · 2012-07-21 15:08 · Score: 1
  
  Were these people on US soil when they performed these acts?
  Am I the only US citizen that is concerned about this?
  Is Saudi Arabia now able to extradite me because I read playboy?
  When Saudi owns on the only oil in the world, yes, the U.S.A. Government would hand you over in a second.
  As it stands now, no, they won't. Give it another 10 years.
  
  --
  Be seeing you...
10. Re:Where is the jurisdiction? by westlake · 2012-07-21 16:10 · Score: 1
  
  Were these people on US soil when they performed these acts?
  In the simplest of cases, jurisdiction lies where the body falls.
  Triggering your infernal device from across a state or international border is not a get out of jail free card.
11. Re:Where is the jurisdiction? by emt377 · 2012-07-21 19:29 · Score: 1
  
  Were these people on US soil when they performed these acts?
  Am I the only US citizen that is concerned about this?
  Is Saudi Arabia now able to extradite me because I read playboy?
  If you upload porn to a server in Saudi Arabia, the UAE, and certain other places - yes, they could very well charge you and get you extradited. However, for political and crimes of a purely moral nature most dictatorships are smart enough to keep a low profile. And democracies tend not to criminalize moral behavior and certainly not political expression. For those sort of things autocracies tend to be more concerned with policing the moral and policial behavior of their own population than worrying about someone who is not present within their borders. Also, extradition treaties exempt political and moral crimes. Most things they'd want you extradited for tend to be property crimes and organized crime (like hiring a hitman who goes there to kill someone), etc that is mostly uncontroversial. Like this Russian, who broke into American servers to steal from people there.
What the ... ? by X.25 · 2012-07-21 10:21 · Score: 4, Interesting

Would Cyprus arrest creators of Stuxnet, on request from Iran, if those people would show up in Cyprus?
1. Re:What the ... ? by Anonymous Coward · 2012-07-21 11:01 · Score: 0
  
  You mean the U.S. Gov and the Israelis?
2. Re:What the ... ? by artor3 · 2012-07-21 12:05 · Score: 3, Informative
  
  That's up to them. Countries have the right to determine whether or not to extradite someone accused of a particular crime. I don't know how else you could expect it to work.
3. Re:What the ... ? by manu0601 · 2012-07-21 13:28 · Score: 1
  
  Would Cyprus arrest creators of Stuxnet, on request from Iran, if those people would show up in Cyprus?
  They cannot, as the head of Stuxnet gang enjoys diplomatic immunity when traveling abroad.
4. Re:What the ... ? by marcosdumay · 2012-07-22 06:24 · Score: 1
  
  The interesting thing about diplomatic immunity is that it is up to the host country to observe it or not. Of course, not observing it will bring consequences, but the choice is always there.
  
  --
  Rethinking email
5. Re:What the ... ? by gl4ss · 2012-07-22 23:35 · Score: 1
  
  they might. the only way to not would be for usa government to fess up that they were behind stuxnet, though even that might not help since stuxnet escaped to the wild. or maybe iran released it to the wild so that the stuxnet creators would end up as wanted criminals.
  problem is you'd have to have some names first.
  I don't think usa could pull "it was warfare" card here even, since collateral damage was all over the globe(and that they're not technically in war with iran). if they'd drone someone in finland and blew up a block of flats then someone would be going down. and someone would sue usa government and even usa courts would agree.
  if this guy was a fsb operative he sure as fuck wouldn't have been extradited.
  
  --
  world was created 5 seconds before this post as it is.
The nature of the cyberattacks by Anonymous Coward · 2012-07-21 10:22 · Score: 0

A DDOS attack run on a âbotnetâ(TM) running on Microsoft Windows ...
How much is that doggie in the window? by pongo000 · 2012-07-21 10:49 · Score: 2

I'm curious as to how much this operation cost the US taxpayer, and whether or not Amazon et. al. will be asked to foot the bill. I'm sure it's not a cheap operation to kidnap/extradite someone, fly them back to the US, put them on trial in front of a jury of non-peers, and house this sure-to-be convicted individual for an insane number of years.

Do I also get the same courtesy if I were to complain about the sustained DDOS attacks on the small network of servers I maintain?
1. Re:How much is that doggie in the window? by the+eric+conspiracy · 2012-07-21 11:10 · Score: 1
  
  Since when is the victim supposed to pay for law enforcement to catch the perp?
  > Do I also get the same courtesy if I were to complain about the sustained DDOS attacks on the small network of servers I maintain?
  Hahahaha
2. Re:How much is that doggie in the window? by Anonymous Coward · 2012-07-22 02:09 · Score: 0
  
  I'm curious as to how much this operation cost the US taxpayer, and whether or not Amazon et. al. will be asked to foot the bill. I'm sure it's not a cheap operation to kidnap/extradite someone, fly them back to the US, put them on trial in front of a jury of non-peers, and house this sure-to-be convicted individual for an insane number of years.
  So if someone robs me, or throws a brick in my window, I should pay the police (government) to go catch the guy? Are you nuts?
  
  Do I also get the same courtesy if I were to complain about the sustained DDOS attacks on the small network of servers I maintain?
  Did these 'sustained DDOS attacks' cause loss of revenue in the 7 figure range? No? Are you an irrelevant sysadmin lifer? Yes?
Varying Relevancies by Rotworm · 2012-07-21 12:13 · Score: 1

It's hard to see how his nationality is relevant if the nation is not involved.
1. Re:Varying Relevancies by I_am_Jack · 2012-07-21 14:06 · Score: 1
  
  It's information. A Russian was arrested in Cyprus for a crime allegedly committed against a US corporation on servers operating in the US. I'd say it's germain. When dealing with international law issues, nationality is important. If his nationality was then being used to somehow intimate that people from a particular country are criminals and thieves, then yes, I'd agree there was unnecessary bias.
Re:US has world Jurisdiction by Anonymous Coward · 2012-07-21 12:13 · Score: 2

Really? Person commits crimes that are even crimes by Russian standards, and you guys get butthurt because he's actually going to be extradited to the country he committed the crimes against?
That's how extradition works, you tools. It's not only the US who engages in the practice.
"and later bragged about" by Anonymous Coward · 2012-07-21 13:56 · Score: 0

Memo to self: Cancel plans to brag about my latest successful evil-genius plot.
Russians..... by Anonymous Coward · 2012-07-21 15:51 · Score: 0

LOL. Funny how they didn't clarify Russian man or female lol, just Russian! Zubakha is just another DDOS packet-kiddy out there trying costing these corporations millions of dollars. 1) You can't get away with packeting 2) It isn't worth the millions of dollars of damage you are doing; considering you are charged a fixed rate by the amount of bandwidth you suck from each drone AND the downtime of server, man hours going through logs, investigation, etc. 3) DOS attacks on large companys are very seldom successful anymore.
Don't Flood! It's Illegal! And you will be arrested.
Doubtful he will face charges inside the USA, Generally they prosecute overseas considering charges are likely being filed from several countrys in which Extradition treaties would have to be agreed upon.
Case Closed: GUILTY! by Anonymous Coward · 2012-07-21 17:01 · Score: 0

Even if he IS innocent (which I am sure is not the case) doesn't really matter
Keywords: Russian + US Charges + Seattle-based
No need to bring him to court, you might as well just lock him up and throw away the key.. Save some time, effort and money.
-- SnappleX
Typos in the patronimic names of both persons by temcat · 2012-07-21 20:45 · Score: 1

Should be Olegovich and Viktorovich.
1. Re:Typos in the patronimic names of both persons by temcat · 2012-07-21 20:47 · Score: 1
  
  Now add to that a typo of mine. Patronymic, not "patronimic".
All hail the US World Government by Anonymous Coward · 2012-07-21 21:17 · Score: 0

Bow down before its might or be disabled.
Wisdom follows, pay attention! by Anonymous Coward · 2012-07-22 04:41 · Score: 0

> After extradition, he's expected to face trial in the U.S.
Don't take that extradiction for granted! Cyprus is very much the "dog on chain" of Moscow, because their economy mostly depends on money laundering for russian crooks. In fact the EU recently debated whether it is acceptable to hand over the EU presidency to Cyprus for this rotation, since their aims are 180 degree opposite to what Western Europe desires.