Passion (DDoS service)

2023: Launch of a service to attack medical institutions in the United States and Europe

In new attacks on medical facilities USA To Europe in and was used by DDoS-service subscription. This was announced Passion on January 31, 2023 by a company Radware specializing in issues. information security

The origin of the Passion cyber group remains unknown. However, according to some reports, these attackers are associated hacker with groups, Anonymous Russia MIRAI, Venom and Killnet. The Passion botnet was reportedly used during the January 27, 2023 attacks targeting medical facilities in the United States, Portugal,,,, Spain,,, and Germany To Poland Finland Norway Netherlands Britain. Passion's tactics and methods resemble those of other cybercriminal groups. After executing a DDoS campaign, attackers usually publish a link to the check-host [.] net page as proof of their success.

Hackers launched a subscription service for DDoS attacks on medical institutions in the USA and Europe

Passion offers access to the service for a certain fee through several Telegram channels. A seven-day subscription costs $30, a 30-day subscription costs $120, and a full year is offered for $1,440. There are several payment methods: Bitcoin, Tether and the Russian QIWI payment system.

The Passion group provides a choice of ten ways to organize an attack, which allows subscribers to configure a malicious campaign and combine various tactics to bypass the means of protection. Available methods include HTTP Raw, Crypto, UAM Browser, HTTPS Mix, Browser, Bypass, DNS l4, Mixamp l4, OVH-TCP l4, and TCP-Kill l4. It is noted that botnets for DDoS attacks are usually created by compromising vulnerable IoT devices such as routers and IP cameras. It is known that the attackers also defaced a number of resources of Japanese and South African organizations.^[1]

Notes