{"id":28270,"date":"2017-03-28T13:26:11","date_gmt":"2017-03-28T05:26:11","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=28270"},"modified":"2017-03-28T13:26:12","modified_gmt":"2017-03-28T05:26:12","slug":"profit-margin-of-a-ddos-attack-can-reach-95","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2017\/03\/28\/profit-margin-of-a-ddos-attack-can-reach-95\/","title":{"rendered":"Profit margin of a DDoS attack can reach 95%"},"content":{"rendered":"

Kaspersky Lab\u2019s experts have studied<\/a> the DDoS services available on the black market and determined just how far this illegal business has advanced, as well as the extent of its popularity and profitability. The worrying news is that arranging an attack costs as little as $7 an hour, while the targeted company can end up losing thousands, if not millions, of dollars.<\/strong><\/p>\n

The level of service involved when arranging a DDoS attack on the black market is not very different from that of a legal business. The only difference is that there\u2019s no direct contact between the provider and the customer.<\/p>\n

\"Kaspersky<\/p>\n

Example of a web service for ordering DDoS attacks that looks more like the web page of an IT startup than a cybercriminal operation<\/p>\n

The \u2018service providers\u2019 offer a convenient site where customers, after registering, can select the service they need, pay for it, and receive a report about the attacks. In some cases there is even a customer loyalty program, with clients receiving rewards or bonus points for each attack.<\/p>\n

There are a number of factors that affect the cost for the customer. One is the type of attack and its source: for example, a botnet made up of popular IoT devices is cheaper than a botnet of servers. However, not all those providing attack services are ready to specify such details.<\/p>\n

Another factor is the duration of the attack (measured in seconds, hours and days), and the client\u2019s location. DDoS attacks on English-language websites, for example, are usually more expensive than similar attacks on Russian-language sites.<\/p>\n

Another big factor affecting the cost is the type of victim. Attacks on government websites and resources protected by dedicated anti-DDoS solutions are much more expensive, as the former are high risk, while the latter are more difficult to attack.<\/p>\n

For instance, on one DDoS-as-a-service website, the cost of an attack on an unprotected website ranges from $50 to $100, while an attack on a protected site costs $400 or more.<\/p>\n

It means a DDoS attack can cost anything from $5 for a 300-second attack, to $400 for 24 hours. The average price for an attack is around $25 per hour.<\/p>\n

\"Kaspersky<\/p>\n

Various tariffs of an English-language service that varies its pricing according to the number of seconds a DDoS attack lasts<\/p>\n

Kaspersky Lab\u2019s experts were also able to calculate that an attack using a cloud-based botnet of 1000 desktops is likely to cost the providers about $7 per hour. That means the cybercriminals organizing DDoS attacks are making a profit of around $18 per hour.<\/p>\n

There is, however, yet another scenario that offers greater profitability for cybercriminals \u2013 it involves the attackers demanding a ransom from a target in return for not launching a DDoS attack, or to call off an ongoing attack. The ransom can be the bitcoin equivalent of thousands of dollars<\/a>, meaning the profitability of a single attack can exceed 95%. In fact, those carrying out the blackmail don\u2019t even need to have the resources to launch an attack \u2013 sometimes the mere threat is enough<\/a>.<\/p>\n

\u201cCybercriminals are constantly on the look<\/a>out for new and cheaper ways of organizing botnets, as well as coming up with ever more ingenious attack scenarios that security solutions will have difficulty dealing with,\u201d says Denis Makrushin, Security Researcher at Kaspersky Lab. \u201cThat\u2019s why, as long as there are vulnerable servers, computers and IoT devices connected to the Internet, and many companies prefer not to invest in security against DDoS attacks, we can expect the profitability of DDoS attacks to continue growing, along with their complexity and frequency.\u201d<\/p>\n

Interestingly, some cybercriminals have no scruples about selling DDoS attacks alongside protection from them. Kaspersky Lab\u2019s experts, however, do not recommend using criminal services.<\/p>\n","protected":false},"excerpt":{"rendered":"

Kaspersky Lab\u2019s experts have studied the DDoS services available on the black market and determined just how far this illegal business has advanced, as well as the extent of its popularity and profitability. The worrying news is that arranging an attack costs as little as $7 an hour, while the targeted company can end up losing thousands, if not millions, of dollars.<\/p>\n","protected":false},"author":6,"featured_media":28271,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[388,2316,101,54,96],"class_list":["post-28270","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-headlines","tag-ddos","tag-it","tag-kaspersky","tag-security","tag-technology"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/28270","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=28270"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/28270\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/28271"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=28270"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=28270"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=28270"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}