Quote · The Journal.
The College Student Who Defeated the World’s Biggest Cyberweapon
Where this was said
The Takedown: Ben Warns the World, Google and DOJ Act
At 33:38 · chapter starts 30:55
With the exploit understood, Ben moved to warn the industry. He identified 10 other residential proxy companies vulnerable to the same bug IP Idea had [1] — Jessica Mendoza "Bug found in 11 proxy companies: Ben Brundage discovered that not only IP Idea but 10 other residential proxy companies were also vulnerabl…" 31:15 . As his final exams loomed, he drafted notifications to all of them, sending the emails on December 17th — the day after his last test [2] — Jessica Mendoza "10 million pre-installed devices: Google identified more than 10 million devices that came with IP Idea's software secretly pre-installed o…" 32:50 . IP Idea replied 9 days later, claiming the email had gone to spam and promising a fix. It was too little, too late. In January, Google obtained a US court order and moved decisively: 13 of IP Idea's business domains were taken down and dozens of its servers were shut off. Google had by then identified over 10 million devices pre-installed with IP Idea's software. Two months later, in March, the Department of Justice struck against four of the world's largest DDoS botnets, including KimWolf — seizing domains, virtual servers, and network infrastructure. At the end of the DOJ press release was a list of companies thanked for their help. Among the major tech firms was Synthient: Ben's one-man startup, operating out of a college dorm room.
Ben Brundage discovered that not only IP Idea but 10 other residential proxy companies were also vulnerable to the same bug exploited by KimWolf.
In January, Google obtained a US court order to shut down 13 of IP Idea's business domains and dozens of its servers. Two months later, the DOJ struck against four major DDoS botnets including KimWolf, seizing domains and infrastructure — and thanked Ben's startup Synthient in the press release.
Google identified more than 10 million devices that came with IP Idea's software secretly pre-installed on them.
According to DOJ court filings, KimWolf launched more than 26,000 DDoS attacks targeting over 8,000 victims worldwide.
Two months after Google's action, the DOJ struck against four of the world's largest DDoS botnets, including KimWolf, seizing domains, servers, and network infrastructure.
Despite the DOJ and Google takedowns, cybersecurity experts say KimWolf is still active, lurking in thousands of vulnerable consumer devices.
