A UK man who DDoS-ed police websites was caught and imprisoned after he jeered at police about the attacks on social media.
Liam Reece Watts, 20, targeted the Greater Manchester Police (GMP) website in August 2018 and then the Cheshire Police site in March 2019, according to ITV News. Both of the public-facing websites were each disabled for about a day, The Register reported.
According to news outlets and Watts’s Twitter posts, the distributed denial-of-service (DDoS) attacks were done in retaliation for Watts having been convicted of calling in bomb hoaxes just days after the 2017 Manchester Arena suicide attack left 22 people dead and 500 injured.
Watts, who was 19 at the time of the DDoS attacks, was caught after he taunted police through Twitter. He used the handle Synic: a possible reference to SYN flood, which is a type of DoS attack in which servers are swamped with SYN – i.e., synchronize – messages.
Watts reportedly wrote this in one of his tweets:
@Cheshirepolice want to send me to prison for a bomb hoax I never did, here you f****** go, here is what I’m guilty of.
Watts reportedly posted that tweet while police were still investigating the first DDoS attack on the GMP site in 2018, and before he unleashed the March 2019 attack on the Cheshire Police site.
He reportedly admitted to carrying out the attack after police searched his home.
Watts said in court that botnets used to carry out DDoS attacks can be rented online for less than USD $100 (£82). DDoS-for-hire sites sell high-bandwidth internet attack services under the guise of “stress testing”. One example is Lizard Squad, which, until its operators were busted in 2016, rented out its LizardStresser attack service… an attack service that was, suitably enough, given a dose of its own medicine when it was hacked in 2015.
The internet is riddled with these services. When the FBI cracked down on DDoS-for-hire sites in December 2018, it led to an 85% slash in attack sizes. That’s good, but it wasn’t cause to let down our guards: NexusGuard – provider of cloud-based DDoS defense – estimated that the 15 services kicked offline by the FBI represented only 11% of all attacks worldwide.
Within a month of Watts’s home being searched and his arrest, both on 26 March 2019, he pleaded guilty to two charges under the Computer Misuse Act.
On Monday, he was sentenced to 16 months in a young offenders’ institution, was given a five-year restraining order to stop him from deleting his browsing history, and had to hand over his computers for destruction. (One assumes the restraining order pertains to whatever computer(s) he buys to replace the demolished ones.) Watts was also handed a victim surcharge tax of £140 (USD $169).
This wasn’t his first conviction for DDoS: Watts was reportedly convicted of a Computer Misuse Act offense in 2016 after doing it to his college.
On his rap sheet, Watts also has a criminal conviction for attempted robbery and for the bomb hoax.
anonymous coward
Why was he sentenced to a youthful offender facility, if he was 19 at the time of his crimes?
Also, his defense should have made notice, in mitigation, that Watts went through the hassle of growing a beard, but failed to groom his unibrow. Clearly, he’s cognitively impaired.
Alan Brown
He’ll be back, unfortunately – and as far as he’s concerned it’ll always be someone else’s fault. All that prison is going to give him is criminal contacts (work for hire) and some training in not being caught – what’s actually needed is detention in a mental health facility until he’s deemed to be no longer a danger to society.
Antisocial script kiddies grow out of it by 14-15. If they don’t then they were always sociopathic individuals waiting to turn into recidivist offenders, need to be treated as such and continually closely monitored for the rest of their lives because _anything_ might set them off. (Eg:
It’s a harsh assessment, but needed in this age where a keyboard warrior can be even more deadly than an actual suicide bomber.
Riggarob
👍👍👍👍😖
anonymous coward
I turned on JavaScript just to give you a thumbs down for being a sociopath yourself. There is no excuse you could give for wishing incarceration on a broad class of people who you have not even met.