DDoS services allegedly set up by the Lizard Squad group are exposing the login credentials of registered users. The LizardStresser DDoS-on-demand service – a DDoS service powered by hacked home routers – appears to be hopelessly insecure.
Details of more than 14,000 users – whose passwords and usernames are stored in plain text – are already in the hands of investigative journalist Brian Krebs (and possibly the FBI).
The Lizard Squad that took down the Xbox Live and PlayStation networks over Christmas has created a website that offers DDoS services for everyone, for a fee of course.
The service appears to have already earned $11,000 in Bitcoins from registered users who paid for its illegal services. See the image posted by Brian Krebs.
British police arrested a second member of the hacking group last week as part of an ongoing investigation being conducted by the US in cooperation with Britain.
