Two 18-year-olds are facing charges after their Thursday arrest for a distributed denial of service (DDoS) for hire service, Israeli police said.
Police arrested Itay Huri and Yarden Bidani who both ended up released after posting a $10,000 bond each. As a part of their Friday release, they were both prohibited from using their computers and phones.
On the same day, DDoS attacks targeted the website of journalist Brian Krebs, who exposed the service. Krebs tweeted the attacks initially reached 20 Gbps, then grew to 128 Gbps and peaked at 140 Gbps.
One Israeli newspaper, Haaretz, said the two ended up arrested following a tip-off from the FBI. Krebs confirmed the information on his site, saying the FBI was investigating the two.
While conducting business as vDos owners, Itay Huri used the P1st or M30W nicknames while Yarden Bidani went under the AppleJ4ck moniker, officials said.
A Twitter account for a man named Yarden Bidani using the @AppleJ4ck_vDos username sent out two tweets on March 7, 2015, claiming he launched a DDoS attack against the Pentagon website.
The vDos website has been down since Friday. Krebs said this happened because a company named BackConnect Security had performed a BGP hijack. A BGP hijack is a technique used to tell other routers on the Internet that an IP can be found on your network when it’s not.
BackConnect Security told Krebs they were under a massive 200 Gbps DDoS attack and they received an email from vDos claiming responsibility for the incident. As such, the company performed a BGP hijack for the IPs Krebs published in his original report, hijacking the vDos servers from under the attackers’ feet.
Krebs wrote about vDos after an anonymous source sent him a database dump from the service’s backend. Krebs and CloudFlare recently published the entire vDos attack log.