Remix.run Logo
haunter 8 hours ago

This is what I don't get

>The Aisuru DDoS botnet operates as a DDoS-for-hire service with restricted clientele; operators have reportedly implemented preventive measures to avoid attacking governmental, law enforcement, military, and other national security properties. Most observed Aisuru attacks to date appear to be related to online gaming.

https://www.netscout.com/blog/asert/asert-threat-summary-ais...

So why? Like why would someone pay to take a game down? I see this all over reddit with different games but I just don't get the point. What's the benefit of taking down an online game for a couple of hours.

denkmoon 8 hours ago | parent | next [-]

Mad salt. Imagine a fully grown man having a toddler tantrum. "If I can't play/win/get my way, nobody can" type mentality. It's also a method of coercion. Give me mod status or I'll DDOS your server and destroy your community.

The other half comes from sever operators ddosing their competition. There is a lot of money to be made from paid cosmetics, ranks, moderator (demi-tyrant) status, etc on custom servers.

redwall_hp 5 hours ago | parent | next [-]

"Game servers" also doesn't just mean Timmy's Minecraft server. It's big commercial games.

Final Fantasy XIV keeps getting hammered, likely Aisuru, off and on since at least September.

https://na.finalfantasyxiv.com/lodestone/news/detail/6b56814...

hx8 4 hours ago | parent [-]

For some scale, Final Fantasy XIV makes about $65 million in annual revenue (and decreasing).

UnlockedSecrets 3 hours ago | parent [-]

According to their latest financial earnings on page 11 of https://www.hd.square-enix.com/eng/ir/library/pdf/25q4slides... they made 55.5 billion yen or about $357 million. So quite a bit more revenue than $65 million

jazzyjackson an hour ago | parent [-]

Square Enix is bigger than final fantasy

buttybutt 31 minutes ago | parent [-]

[dead]

sabatonfan 5 hours ago | parent | prev | next [-]

What you are saying fits perfectly well in minecraft communities.

Are you mentioning the minecraft community by your message or any other gaming communities too

baxtr 4 hours ago | parent | prev | next [-]

Games continue beyond the Games themselves...

alickz 5 hours ago | parent | prev [-]

>There is a lot of money to be made from paid cosmetics, ranks, moderator (demi-tyrant) status, etc on custom servers.

Anyone have any idea how much a 15 Tbps DDoS attack would cost?

Thousands of dollars? Tens of thousands?

hansvm 5 hours ago | parent | next [-]

Ballpark math says you could sustain it for half an hour on Hetzner for $5k-$6k (only from 1500 IPs though), at least if your account didn't get banned first and you're halfway decent at network programming. I have no idea what a proper botnet like this costs though or how large the profit margins are.

anamexis 4 hours ago | parent [-]

Isn't the idea behind botnets that no one is paying for the bandwidth, besides the unsuspecting random people who have fallen victim to malware?

I'd imagine the pricing is quite disconnected from the price of "legitimate" bandwidth. But I don't know in what direction.

ocdtrekkie 3 hours ago | parent [-]

Yeah I assume there's the initial startup cost of successfully managing to infect a large network of devices, and then the cost for any given use is likely "what customers will pay for it". If they are selecting out big money targets and focusing on gaming, I'm guessing the price isn't that high, but they also presumably know interesting a state actor in taking them down either by changing targets or bringing in enough money is bad for business.

weq 31 minutes ago | parent | prev | next [-]

back in '98 i got a 100mb per download limit for $100 on my cable connection. i recall getting DoS'd by someone cause i was a lpb barstard in quake tf. They were kind though, only DoS'd me 90mb as a warning.... Years later, TF2 is getting DoS'd into oblivion, an extorhted by DDoS for hire. Some things change, some things stay the same.

asciii 5 hours ago | parent | prev [-]

I'm wagering something cheap for individual with a lot of bitcoin or crypto laying around

Onawa 8 hours ago | parent | prev | next [-]

It depends on the game, but for those with some kind of marketplace or transferable currency, I'm guessing market manipulation is one possible reason.

For other games, maybe trying to interrupt some time limited event or tournament. Going all the way down the rabbit hole, if you're not already familiar take a look at how crazy things get in a game like EVE: Online.

Then of course there are the bored trolls and/or people who feel wronged by the game's developers or other players.

manquer 8 hours ago | parent | prev | next [-]

Probably it has to do with all the gambling sites associated with gaming not the games itself.

Taking a competitor offline for a few hours is a lot of money in a market business I expect.

there seems to be lot of weird stuff going on with gaming casinos the recent CoffeeZilla episode comes to mind, so wouldn’t be surprised if botnets are used

iknowstuff 8 hours ago | parent | prev | next [-]

They get banned for trolling, griefing, cheating, breaking rules etc. and want revenge. Every game operator has to deal with idiots like this

AmbroseBierce 8 hours ago | parent [-]

[flagged]

iknowstuff 8 hours ago | parent | next [-]

yeah bud if the person ends up ddosing I'm 100% certain their ban was justified lol

AmbroseBierce 7 hours ago | parent [-]

[flagged]

iknowstuff 7 hours ago | parent [-]

yes I've banned countless such assholes

7 hours ago | parent | prev | next [-]
[deleted]
water-your-self 7 hours ago | parent | prev [-]

At the end of the day, at least for silly private servers, you are always welcome to build it yourself. Theres much to learn in doing that.

bstsb 8 hours ago | parent | prev | next [-]

the ddos market has been somewhat centered around gaming for a while now, mainly to take down game server competition, or as an attempt to sell big players on "ddos protection" services.

well, gaming and Krebs's blog: https://krebsonsecurity.com/2025/05/krebsonsecurity-hit-with...

jsheard 6 hours ago | parent [-]

Yep, Minecraft servers get DDoSed so often that Cloudflare actually offers turnkey protection for them specifically.

https://www.cloudflare.com/en-gb/application-services/produc...

wnevets an hour ago | parent | prev | next [-]

> So why? Like why would someone pay to take a game down?

esports gambling and winning tournaments is big business.

> During the Fortnite Championship Series finals, a pair of pro players may have utilized denial of service attacks to disadvantage contesters [1]

[1] https://fortnitetracker.com/article/1087/ddos-scandal-from-c...

c420 6 hours ago | parent | prev | next [-]

I'm surprised no one has mentioned duping. Selling items and currency for real world money is big bucks and IME, server crashes reliably enable duping exploits.

Not saying that's the case in this particular incident though.

Levitating 6 hours ago | parent | prev | next [-]

The results are very public, it's the same way IRC is often targeted. They're easy targets, thousands of users are affected and the results are immediately noticeable.

ZeWaka 6 hours ago | parent | prev | next [-]

A game I work with got hit by ~10Tbps earlier this year. It's likely because someone got mad they were banned.

wnevets an hour ago | parent | prev | next [-]

> So why? Like why would someone pay to take a game down?

esports gambling is big business

ddtaylor 7 hours ago | parent | prev | next [-]

> So why? Like why would someone pay to take a game down? I see this all over reddit with different games but I just don't get the point. What's the benefit of taking down an online game for a couple of hours.

Most of the time crime groups are running extortion campaigns, amplification campaigns, etc. For example, if a competitor can benefit from them being down you may be able to sell that. Eventually we will probably see the invention of crowd-funded randsomware, where everyone must submit one verification can of crypto to unlock the hacked game servers.

neilv 5 hours ago | parent | prev | next [-]

A satisfying theory for a lot of DDoS would be extortion or protection rackets. Pay up or we will DDoS you, or pay up or 'someone else' will DDoS you.

That's enough to explain it. But if you wanted to go more full shadowy conspiracy theory, someone arranged for a protection service that just so happens to work by giving some entity cleartext surveillance over much of the internet. Perhaps as a response to HTTPS everywhere being annoying.

I'm not suggesting that's the situation, but that it's the kind of possibility to keep in mind, intellectually, and it would be consistent with history.

4 hours ago | parent | prev | next [-]
[deleted]
vl 6 hours ago | parent | prev | next [-]

What is even more interesting why attack Azure? It's not possible to extort anything from Microsoft, so what's the rationale?

baby_souffle 6 hours ago | parent | next [-]

Misdirection. If I knock _you_ offline, its not going to be that difficult for you to put together a probable suspects list with me on it.

If it's going to cost me about the same in terms of resources to target you and a bunch of other people colocated with you, it's a bit less obvious who launched it and why.

RajT88 5 hours ago | parent | prev | next [-]

> targeting a specific public IP address

They weren't targeting Azure itself, per se, but some service which was hosted on Azure.

The IP address in question wasn't mentioned, so we're left to speculate what this was about.

fortran77 5 hours ago | parent | prev | next [-]

Microsoft has succumbed to extortion recently.

markdown 3 hours ago | parent | prev [-]

> It's not possible to extort anything from Microsoft

lul wut?

https://www.businessinsider.com/trump-white-house-ballroom-d...

https://www.cnbc.com/2025/01/09/microsoft-contributes-1-mill...

adventured an hour ago | parent [-]

It's the exact opposite of extortion. They're thrilled to spend money to buy political favor whenever possible. It's not even a drop in the bucket.

"Boeing, Microsoft and Amazon among big donors to Biden’s inauguration"

https://www.seattletimes.com/seattle-news/politics/boeing-mi...

mattwad 4 hours ago | parent | prev | next [-]

competitors might want to drive users to move away if they think a platform is broken

giancarlostoro 7 hours ago | parent | prev | next [-]

Uh I used to get DDoSed by “booter” services whenever I would login to one of my Skype accounts. The script kiddie scene is that petty. In the private server scene one guy would DDoS competing servers that way everyone would funnel to his own.

Its just toxic behavior.

zaphirplane 8 hours ago | parent | prev | next [-]

Depends on How much does it cost to hire it

Andrex 4 hours ago | parent | prev | next [-]

Gamers, am I right?

jay_kyburz 6 hours ago | parent | prev | next [-]

I've always imagined somebody will get pissed-off at me one day for banning them for bad behavior, or because I said something wrong online.

hobs 8 hours ago | parent | prev | next [-]

Most of the time its just blackmail/extortion - pay us or we do the thing.

Hnrobert42 7 hours ago | parent | prev [-]

Extortion. You got a nice little game server there. Would be a shame if anything happened to it.

diath an hour ago | parent [-]

I'm not sure why you're being downvoted, this is literally what keeps happening to me. I run a couple private MMO servers, I regularly get hit with DDoS attacks and clowns like this guy DMing me to demand money to stop attacking my servers:

https://abyss.diath.net/img/20251118055501688.png